According to the Identity Theft Resource Center (ITRC), the volume of data breaches in the US fell in Q1 2023, but the number of notifications that didn’t contain actionable information increased 20% from the previous quarter.
The nonprofit tracks publicly reported data breaches and leaks in the United States, but is disappointed to find that compromised companies are increasingly reluctant to share critical information about incidents.
This means that affected people cannot make an accurate assessment of the risk of a data breach, and argue what actions should be taken after a breach involving data. increase.
The number of data breaches without actionable information on the root cause of the breach rose from just five in Q1 2021 to 155 a year later and 187 in Q1 2023, the ITRC said. clarified.
ITRC President and CEO Eva Velasquez said:
“Of the top 10 breaches confirmed in Q1, 60% did not contain information about the root cause of the event, compared to 40% in Q4 2022. and businesses are at risk of cyberattacks and data breaches.”
Last year, the nonprofit claimed that only one-third (34%) of breach notifications included both victim and attack details.
Read more about data breaches: 2022 is near record year for US data breaches.
The total number of reported breaches fell 13% from the previous quarter to 445 in the first three months of 2023. The number of victims he fell by 65% to 89 million.
Healthcare topped the list of most compromised sectors for the third consecutive quarter, followed closely by financial services. According to the report, incidents in the manufacturing, utilities, technology, healthcare and transportation sectors affected the most people.
Velasquez argued that the number of victims and breaches typically declines in the first quarter of each year.
