Identity theft from data breaches has cost Americans $20 billion over the past decade

This number comes from just four breaches: Equifax (2017), Exactis (2018), National Public Data (2023), and TransUnion (2025). This estimate applies federal data on identity theft loss, including a typical loss of about $200 per victim, across hundreds of millions of exposed records.

The result is a total of billions of dollars. It is also narrow. The account shows reported financial losses. Doesn’t count for damaged credit files, Delayed loan approvals, high borrowing costs, or the hours consumers spend recovering their financial records after misuse.

So where does this leave you?

Sign up for my free CyberGuy report
Get the best tech tips, breaking security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – for free when you join my site CYBERGUY.COM Newsletter.

How Debit Card Fraud Can Happen Without Using a Card

Massive data breaches at Equifax, Exactis, National Public Data, and TransUnion revealed personal information that criminals later used for identity theft and financial fraud. (Nastasek/Getty Images)

What this broker leaves out

The $200 figure used in the federal estimate is an average figure. It represents the midpoint of reported identity theft losses collected by the Federal Trade Commission. Many cases fall above it. FTC Consumer Sentinel data shows that losses fluctuate widely depending on how the fraud occurred. When money is moved through bank transfers or payment apps, the average reported losses are significantly higher than in cases involving unauthorized credit card charges.

Loan or rental fraud can leave balances that need formal disputes before lenders correct the record. Reversing the charge does not automatically restore your credit file. Accounts opened in your name can lead to difficult inquiries.

Missing payments are linked Fraudulent loans They can appear before an account is determined to be fraudulent. Lenders who review your mortgage or auto application evaluate the report as it exists at that time. The $200 average captures a reported dollar amount. It falls short of showing how misuse of identity can stifle borrowing terms or access to credit later on.

The time cost of identity theft

After identity theft, the first step the FTC asks you to take is to file a report at IdentityTheft.gov. This creates a recovery plan and identity theft report, which can be used to dispute fraudulent accounts. This is the starting point, and is not close to the solution.

Victims are asked to contact each affected creditor directly, close or freeze the compromised accounts and request written confirmation that the account was fraudulent. If a new line of credit is opened, it often requires submitting more documents, completing affidavits and following up to have the lender update its reports to the credit bureaus.

The FTC also recommends placing a fraud alert with one of the three nationwide credit bureaus, which must notify the others. A Credit freeze It should be placed separately with each desk. If you later apply for credit, they must temporarily lift the freeze before lenders can access your credit report. The Identity Theft Resource Center (ITRC) reports that victims often spend weeks resolving cases involving new account fraud. Complex cases can drag on longer, especially when collection agencies are involved or when fraudulent tax returns trigger an IRS identity check.

One billion identity records were exposed in an identity verification data leak

An identity theft victim in Albany, New York, reviews the documents he collected. Victims of identity theft often spend weeks discussing fraudulent accounts, contacting lenders and restoring their credit reports after misusing stolen data. (John Carl Dannibal/Albany Times Union via Getty Images)

During that period, you may be collecting records, mailing certified letters, waiting with creditors, or tracking dispute deadlines. The process moves at the pace of institutional review. All that time needed to repair records is part of the cost of your stolen identity.

Earlier this year, a 57-year-old woman in Los Alamitos, California, discovered that her identity had been stolen after receiving a voicemail from a Hertz rental site in Miami asking when she planned to return her Mercedes-Benz. She never rented the car, reported $78,500 in losses and spent nearly ten days trying to recover one stolen ID.

This is where identity theft becomes more costly

In its March 2025 Consumer Sentinel Network release, the FTC said consumers lost more than $12.5 billion to fraud in 2024, a 25% increase from 2023. Identity theft accounted for a large share of those reports. When abuse goes undetected, it spreads.

A stolen Social Security number can be used to open multiple accounts over time. Hard inquiries appear across different credit bureaus. New lenders and collection agencies appear, and each additional account adds another dispute you need to resolve. Identity theft often doesn’t stop after the first incident.

The International Truth and Reconciliation Commission says that 31.5% of consumer victims in general were targeted twice in one year, and 24.6% of them were targeted three times in the past year. Although fewer people report the first time identity theft, Repeated targeting is becoming more common. Once your information is exposed, it can be used again. Losses can grow quickly, too.

The same Information Research Center report found that more than 20% of victims reported losses exceeding $100,000. As fraud spreads, so does clean-up. What starts as a single unauthorized account can turn into disputes with lenders, credit bureaus and collection agencies. This accumulation over time is where identity theft becomes more costly.

How Identity Theft Protection and Credit Monitoring Can Help

If you rely on occasional credit checks or alerts from a single bank, you’ll only see activity associated with one account. If the fraud appears elsewhere, it may not become apparent until the lender reports it.

Identity protection services can track activity across the three major credit bureaus and alert you of new inquiries or accounts as they arise. Some are also examining breach data sets for exposed personal identifiers, including Social Security numbers and email addresses. Earlier alerts mean that fewer fraudulent accounts can accumulate before intervention.

5 myths about identity theft that put your data at risk

Identity theft linked to breaches of major data brokers has cost Americans more than $20 billion over the past decade, according to a Senate report that analyzes hundreds of millions of exposed records. (Sarah Diggins/The Austin American-Statesman via Getty Images)

Many services offer three-bureau credit monitoring and real-time alerts when there are changes to your credit report. Some also scan known data breach logs for exposed personal information and connect members with fraud resolution specialists who assist with documentation and disputes. Some plans include identity theft insurance that can help cover eligible recovery costs, subject to policy limits.

Monitoring does not prevent every attempt at identity theft. It can reduce the extent of fraud and how long it takes to contain it.

See my tips and top picks for the best identity theft protection at Cyberguy.com.

Key takeaways for Kurt

The numbers associated with major data broker breaches show how expensive stolen information can be. A single exposed record may seem innocuous at first, but once that information spreads through the data broker ecosystem, it can resurface again and again. For many victims, the real damage is not limited to the money lost. It’s time spent negotiating accounts, fixing credit files, and trying to prevent fraud from spreading further. Identity theft rarely happens in one clean event. It often unfolds slowly as criminals reuse the same stolen details across multiple lenders, services and databases. The good news is that you are not helpless. Monitoring your credit, limiting the extent to which your personal information is spread online, and responding quickly to alerts can reduce damage if your information is misused. The earlier you detect suspicious activity, the easier it is to stop it before it spreads.

Have you ever checked your credit report or looked up your name online and found information about yourself that surprised you? Let us know by writing to us at Cyberguy.com.

Click here to download the FOX NEWS app

Sign up for my free CyberGuy report
Get the best tech tips, breaking security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – for free when you join my site CYBERGUY.COM Newsletter.

Copyright 2026 CyberGuy.com. All rights reserved.