U.S. Data Breaches Remain at Record Highs in 2025, Driven by Social Engineering The Identity Theft Resource Center’s (ITRC) 2025 Data Breach Report reveals that U.S. data compromises continue at near-record levels, with 3,322 publicly reported incidents this year. Phishing, smishing, and business email compromise (BEC) remain the leading causes, reinforcing social engineering as the dominant attack vector for cybercriminals. A concerning trend is the decline in breach transparency: only 30% of 2025 breach notices disclosed how incidents occurred, down from near-universal reporting five years ago. This lack of clarity complicates risk assessment for investors and hampers the development of effective defensive strategies for organizations. The economic impact of cyber incidents is particularly severe for small businesses, with 81% reporting a breach or attack and nearly 40% raising prices to cover remediation costs. The ITRC suggests these dynamics may contribute to inflation, as financial burdens are passed on to consumers. Individuals also face significant losses, with a notable share of victims reporting fraud-related damages exceeding $10,000, and some experiencing six- or seven-figure impacts. Beyond financial harm, the report highlights severe non-financial consequences, including a majority of victims considering self-harm, underscoring the broader societal and regulatory urgency around identity protection. For small businesses, the ITRC recommends layered defenses, including strict access controls, strong authentication, vendor risk oversight, automated patching, and continuous employee training to combat social engineering. Additionally, reducing publicly available employee data such as information on data broker sites could limit attackers’ ability to craft targeted phishing and BEC campaigns. From an investor perspective, the report signals a growing market for cybersecurity and identity-protection solutions, particularly those addressing social engineering and data-broker risks. While demand for such services may rise, competitive pressures, regulatory changes, and customer spending trends will shape the long-term financial impact.