Technology
Visualizing The 50 Biggest Data Breaches From 2004–2021
View high-resolution version of infographic
Visualizing The 50 Biggest Data Breaches From 2004–2021
As our world has become increasingly reliant on technology and data stored online, data breaches have become an omnipresent threat to users, businesses, and government agencies. In 2021, a new record was set with more than 5.9 billion user records stolen.
This graphic by Chimdi Nwosu visualizes the 50 largest data breaches since 2004, along with the sectors most impacted. Data was aggregated from company statements and news reports.
Understanding the Basics of Data Breaches
A data breach is an incident in which sensitive or confidential information is copied, transmitted or stolen by an unauthorized entity. This can occur as a result of malware attacks, payment card fraud, insider leaks, or unintended disclosure.
The targeted data is often customer PII (personally identifiable information), employee PII, intellectual property, corporate data or government agency data.
Date breaches can be perpetrated by lone hackers, organized cybercrime groups, or even national governments. Stolen information can then be used in other criminal enterprises such as identity theft, credit card fraud, or held for ransom payment.
Notable Data Breaches Since 2004
The largest data breach recorded occurred in 2013 when all three billion Yahoo accounts had their information compromised. In that cyberattack, the hackers were able to gather the personal information and passwords of users. While the full extent of the Yahoo data breach is still not fully realized, subsequent cybercrimes across the globe have been linked to the stolen information.
Here are the 50 largest data breaches by amount of user records stolen from 2004–2021.
Rank | Entity | Sector | Records Compromised | Year |
---|---|---|---|---|
1 | Yahoo | Web | 3.0B | 2013 |
2 | River City Media | Web | 1.4B | 2017 |
3 | Aadhaar | Government | 1.1B | 2018 |
4 | First American Corporation | Finance | 885M | 2019 |
5 | Spambot | Web | 711M | 2017 |
6 | Web | 700M | 2021 | |
7 | Tech | 533M | 2021 | |
8 | Yahoo | Web | 500M | 2014 |
9 | Marriott International | Retail | 500M | 2018 |
10 | Syniverse | Telecoms | 500M | 2021 |
11 | Web | 419M | 2019 | |
12 | Friend Finder Network | Web | 412M | 2016 |
13 | OxyData | Tech | 380M | 2019 |
14 | MySpace | Web | 360M | 2016 |
15 | Exactis | Data | 340M | 2018 |
16 | Tech | 330M | 2018 | |
17 | Airtel | Telecoms | 320M | 2019 |
18 | Indian citizens | Web | 275M | 2019 |
19 | Wattpad | Web | 270M | 2020 |
20 | Microsoft | Web | 250M | 2019 |
21 | Experian Brazil | Finance | 220M | 2021 |
22 | Chinese resume leak | Web | 202M | 2019 |
23 | Court Ventures | Finance | 200M | 2013 |
24 | Apollo | Tech | 200M | 2018 |
25 | Deep Root Analytics | Web | 198M | 2015 |
26 | Zynga | Gaming | 173M | 2019 |
27 | VK | Web | 171M | 2016 |
28 | Equifax | Finance | 163M | 2017 |
29 | Dubsmash | Web | 162M | 2019 |
30 | Massive American business hack | Finance | 160M | 2013 |
31 | MyFitnessPal | App | 150M | 2018 |
32 | Ebay | Web | 145M | 2014 |
33 | Canva | Web | 139M | 2019 |
34 | Heartland | Finance | 130M | 2009 |
35 | Nametests | App | 120M | 2018 |
36 | Tetrad | Finance | 120M | 2020 |
37 | Web | 117M | 2016 | |
38 | Pakistani mobile operators | Telecoms | 115M | 2020 |
39 | ElasticSearch | Tech | 108M | 2019 |
40 | Capital One | Finance | 106M | 2019 |
41 | Thailand visitors | Government | 106M | 2021 |
42 | Firebase | App | 100M | 2018 |
43 | Quora | Web | 100M | 2018 |
44 | Rambler.ru | Web | 98M | 2012 |
45 | TK / TJ Maxx | Retail | 94M | 2007 |
46 | MyHeritage | Web | 92M | 2018 |
47 | AOL | Web | 92M | 2004 |
48 | Dailymotion | Web | 85M | 2016 |
49 | Anthem | Health | 80M | 2015 |
50 | Sony Playstation Network | Gaming | 77M | 2011 |
The massive Yahoo hack accounted for roughly 30% of the 9.9 billion user records stolen from the Web sector—by far the most impacted sector. The next most-impacted sectors were Tech and Finance, with 2 billion and 1.6 billion records stolen, respectively.
Although these three sectors had the highest totals of user data lost, that doesn’t necessarily imply they have weaker security measures. Instead, it can probably be attributed to the sheer number of user records they compile.
Not all infamous data breaches are of a large scale. A smaller data breach in 2014 made headlines when Apple’s iCloud was hacked and the personal pictures of roughly 200 celebrities were disseminated across the internet. Although this highly targeted hack only affected a few hundred people, it highlighted how invasive and damaging data breaches can be to users.
The Cost of Data Breaches to Businesses
Every year data breaches cost businesses billions of dollars to prevent and contain, while also eroding consumer trust and potentially having an adverse effect on customer retention.
A 2021 IBM security report estimated that the average cost per data breach for companies in 2020 was $4.2 million, which represents a 10% increase from 2019. That increase is mainly attributed to the added security risk associated with having more people working remotely due to the COVID-19 pandemic.
Measures to Improve Data Security
Completely preventing data breaches is essentially impossible, as cybercrime enterprises are often persistent, dynamic, and sophisticated. Nevertheless, businesses can seek out innovative methods to prevent exposure of data and mitigate potential damages.
For example, after the iCloud attack in 2014, Apple began avidly encouraging users to adopt two-factor authentication in an effort to strengthen data security.
Regardless of the measures businesses take, the unfortunate reality is that data breaches are a cost of doing business in the modern world and will continue to be a concern to both companies and users.

This article was published as a part of Visual Capitalist's Creator Program, which features data-driven visuals from some of our favorite Creators around the world.
Markets
Timeline: The Shocking Collapse of Silicon Valley Bank
Silicon Valley Bank was shuttered by regulators becoming the largest bank to fail since the height of the Financial Crisis. What happened?

Timeline: The Shocking Collapse of Silicon Valley Bank
Just days ago, Silicon Valley Bank (SVB) was still viewed as a highly-respected player in the tech space, counting thousands of U.S. venture capital-backed startups as its customers.
But fast forward to the end of last week, and SVB was shuttered by regulators after a panic-induced bank run.
So, how exactly did this happen? We dig in below.
Road to a Bank Run
SVB and its customers generally thrived during the low interest rate era, but as rates rose, SVB found itself more exposed to risk than a typical bank. Even so, at the end of 2022, the bank’s balance sheet showed no cause for alarm.
As well, the bank was viewed positively in a number of places. Most Wall Street analyst ratings were overwhelmingly positive on the bank’s stock, and Forbes had just added the bank to its Financial All-Stars list.
Outward signs of trouble emerged on Wednesday, March 8th, when SVB surprised investors with news that the bank needed to raise more than $2 billion to shore up its balance sheet.
The reaction from prominent venture capitalists was not positive, with Coatue Management, Union Square Ventures, and Peter Thiel’s Founders Fund moving to limit exposure to the 40-year-old bank. The influence of these firms is believed to have added fuel to the fire, and a bank run ensued.
Also influencing decision making was the fact that SVB had the highest percentage of uninsured domestic deposits of all big banks. These totaled nearly $152 billion, or about 97% of all deposits.
By the end of the day, customers had tried to withdraw $42 billion in deposits.
What Triggered the SVB Collapse?
While the collapse of SVB took place over the course of 44 hours, its roots trace back to the early pandemic years.
In 2021, U.S. venture capital-backed companies raised a record $330 billion—double the amount seen in 2020. At the time, interest rates were at rock-bottom levels to help buoy the economy.
Matt Levine sums up the situation well: “When interest rates are low everywhere, a dollar in 20 years is about as good as a dollar today, so a startup whose business model is “we will lose money for a decade building artificial intelligence, and then rake in lots of money in the far future” sounds pretty good. When interest rates are higher, a dollar today is better than a dollar tomorrow, so investors want cash flows. When interest rates were low for a long time, and suddenly become high, all the money that was rushing to your customers is suddenly cut off.”
Year | U.S. Venture Capital Activity | Annual % Change |
---|---|---|
2021 | $330B | 98% |
2020 | $167B | 15% |
2019 | $145B | 1% |
2018 | $144B | 64% |
2017 | $88B | 6% |
2016 | $83B | -3% |
Source: Pitchbook
Why is this important? During this time, SVB received billions of dollars from these venture-backed clients. In one year alone, their deposits increased 100%. They took these funds and invested them in longer-term bonds. As a result, this created a dangerous trap as the company expected rates would remain low.
During this time, SVB invested in bonds at the top of the market. As interest rates rose higher and bond prices declined, SVB started taking major losses on their long-term bond holdings.
Losses Fueling a Liquidity Crunch
When SVB reported its fourth quarter results in early 2023, Moody’s Investor Service, a credit rating agency took notice. In early March, it said that SVB was at high risk for a downgrade due to its significant unrealized losses.
In response, SVB looked to sell $2 billion of its investments at a loss to help boost liquidity for its struggling balance sheet. Soon, more hedge funds and venture investors realized SVB could be on thin ice. Depositors withdrew funds in droves, spurring a liquidity squeeze and prompting California regulators and the FDIC to step in and shut down the bank.
What Happens Now?
While much of SVB’s activity was focused on the tech sector, the bank’s shocking collapse has rattled a financial sector that is already on edge.
The four biggest U.S. banks lost a combined $52 billion the day before the SVB collapse. On Friday, other banking stocks saw double-digit drops, including Signature Bank (-23%), First Republic (-15%), and Silvergate Capital (-11%).
Name | Stock Price Change, March 10 2023 | Unrealized Losses / Tangible Equity |
---|---|---|
SVB Financial | -60%* | -99% |
First Republic Bank | -15% | -29% |
Zions Bancorp | -2% | -47% |
Comerica | -5% | -47% |
U.S. Bancorp | -4% | -55% |
Fifth Third Bancorp | -4% | -38% |
Bank of America | -1% | -54% |
Wells Fargo | 1% | -33% |
JPMorgan | -1% | -21% |
Source: Morningstar Direct. *Represents March 9 data, trading halted on March 10.
When the dust settles, it’s hard to predict the ripple effects that will emerge from this dramatic event. For investors, the Secretary of the Treasury Janet Yellen announced confidence in the banking system remaining resilient, noting that regulators have the proper tools in response to the issue.
But others have seen trouble brewing as far back as 2020 (or earlier) when commercial banking assets were skyrocketing and banks were buying bonds when rates were low.
The whole sector is in crisis, and the banks and investors that support these assets are going to have to figure out what to do.-Christopher Whalen, The Institutional Risk Analyst
-
Politics4 weeks ago
How the Russian Invasion of Ukraine Impacts Science and Academia
-
Datastream2 weeks ago
The Drive for a Fully Autonomous Car
-
Demographics4 days ago
Mapped: The World’s Happiest Countries in 2023
-
Misc4 weeks ago
Ranked: Biotoxins in Nature, by Lethal Dose
-
Maps2 weeks ago
Mapped: The Largest 15 U.S. Cities by GDP
-
United States2 days ago
Visualizing the Link Between Unemployment and Recessions
-
Markets4 weeks ago
Which Countries Have the Lowest Inflation?
-
History2 weeks ago
Vintage Viz: China’s Export Economy in the Early 20th Century