Data Privacy Statistics (2026): Public Concern, Breach Costs, Fraud Losses & What Nonprofits Should Do
Sourced 2026 data privacy statistics on public concern, breach costs, fraud losses and breach frequency, plus what they mean for nonprofit volunteer screening.
On this page
Volunteer databases are full of personal information: names, dates of birth, addresses, driver's license numbers and sometimes bank details for reimbursements. That makes privacy a practical concern for every nonprofit, church and food bank that recruits volunteers. This report pulls together the most useful verified figures on public attitudes toward data, what breaches cost, how often they happen, and what consumers lose to fraud. It is part of our statistics hub, and every number links to its original source.
Key takeaways
How worried Americans are about their data
Concern is high and has been rising. In its May 2023 survey of 5,101 adults, Pew found that Pew Research Center recorded 71% of adults worried about government data use, up from 64% in 2019. A separate Pew analysis found that Pew's privacy-laws findings show 72% of Americans have little or no understanding of the laws that protect their data, up from 63% in 2019.
Understanding is moving the wrong way. Pew's data show the share who say they understand privacy laws at least somewhat fell from 37% in 2019 to 27% in 2023. Most people also say they do not understand company data practices, and that figure rose from 59% to 67% over the same period, per the Pew online privacy summary.
Children's data is an especially sensitive point for families and youth programs. Pew reports that about nine-in-ten Americans (89%) are concerned about social media sites knowing personal information about children. That matters for any program that collects minors' details, which we cover in our youth volunteer statistics report.
What data breaches cost
IBM's 2025 benchmark found the global average breach cost fell to $4.44 million, the first decline in five years, according to a summary of IBM's 2025 report. The U.S. figure moved the other way. IBM's data, as published on IBM's data breach topic page, puts the U.S. average at $10.22 million and healthcare at $7.42 million, the highest of any industry for the 14th consecutive year.
Vendors are a growing weak point. Per the BARR Advisory takeaways from IBM's 2025 report, vendor and supply-chain breaches averaged $4.91 million, the second-highest cost among attack vectors, and third parties were the second most common initial attack vector behind phishing. For nonprofits that outsource payroll, donor software or background screening, that is a direct reason to check each vendor's security posture.
How breaches happen: the human and third-party factor
Verizon's 2025 Data Breach Investigations Report analyzed 22,052 security incidents and 12,195 confirmed breaches. Across the dataset, the human element stayed at roughly 60% of breaches, according to the Verizon 2025 DBIR infographic. A later summary cites 62%, so treat the exact figure as a range near 60%.
The third-party jump is the number to watch. Verizon reports that third-party involvement doubled in a single year, from 15% to 30% of breaches. Stolen credentials are part of the picture too: the same DBIR infographic notes that 46% of systems with corporate logins in infostealer data were personal, unmanaged devices. Employees and volunteers who use their own phones and email for organizational work are a real exposure, which is why our nonprofit data breach statistics piece and cybercrime guide go deeper on protections.
Fraud losses are climbing fast
The Federal Trade Commission's figures show a steep rise. Consumers reported more than $12.5 billion lost to fraud in 2024, a 25% increase over the prior year. For 2025, testimony summarized by Verdict reports 3 million fraud reports and $15.9 billion in reported losses. The FTC also estimated that the true cost of fraud in 2024 could reach as high as $195.9 billion once underreporting is considered.
Impersonation is the most common scam type. The FTC reports that people reported losing $3.5 billion to imposter scams in 2025, and that these scams were the most reported fraud category, with nearly one in three fraud reports. Older adults carry a heavy share: people age 50 and older reported $4.3 billion lost in 2025, compared with $2.3 billion among younger adults. Many congregations and senior-serving nonprofits fall squarely in that group, and so do their volunteers.
Breach volume in 2026
Breach notifications have fallen in the first half of 2026 compared with a year earlier, but the number of people affected is far higher because of a few very large incidents. The Privacy Rights Clearinghouse 2026 midyear report counts 5,429 notification filings, down 16%, and 1,969 distinct breach events. One breach, Instructure's Canvas platform, accounts for most of the 343 million affected, though that total is based on an attacker's unverified claim.
| Measure | H1 2025 | H1 2026 | Change |
|---|---|---|---|
| Notification filings | 6,480 | 5,429 | -16% |
| Breach events | 2,184 | 1,969 | -10% |
Healthcare remains the sector to watch. An analysis of HHS Office for Civil Rights data reports that reportable healthcare incidents have stabilized around 700 to 750 a year. Faith-based health ministries and volunteer-driven clinics should assume they are in scope for that same scrutiny.
What this means for your volunteer program
These figures point to three priorities for any volunteer-based organization. First, verify who is joining: impersonation drives a large share of fraud, so confirm identity before a volunteer receives access to records. Second, limit what you hold. Screen only what you need and delete what you no longer require. Third, audit your vendors, because third-party breaches are rising fastest.
VolunteerBadge offers FCRA-compliant background checks with identity verification, starting at $5 per check with no monthly fees. Our identity verification feature confirms who a volunteer is before a check runs, and step-by-step support for running checks shows how to keep the process consistent. Organizations with large rosters can review pricing and our nonprofit solutions, and importing volunteers keeps records out of spreadsheets that get emailed around. For criminal-record context, see our online criminal record check guide and what background checks look for. Our academy has short courses on the same topics.
Start with VolunteerBadge: $5 FCRA-compliant checks, no monthly fees
Download the data
Every statistic in this report is listed with its source, year and link in the spreadsheet below.
Frequently asked questions
Q: How many Americans are concerned about data privacy?
In Pew's 2023 survey, 71% of adults said they were very or somewhat concerned about how the government uses data about them, and 81% reported concern about how companies use their data, according to Fast Company's summary of Pew.
Q: What does a data breach cost on average?
IBM's 2025 report puts the global average at $4.44 million and the U.S. average at $10.22 million, the highest figure of any country.
Q: What share of breaches involve people?
Verizon's 2025 DBIR found the human element involved in about 60% of breaches.
Q: How much did consumers lose to fraud in 2025?
The FTC reported $15.9 billion in losses from about 3 million fraud reports.
Q: Why does identity verification matter for volunteers?
Impersonation is the most common fraud category reported to the FTC, so confirming who someone is before granting access reduces risk.
Q: Is this article legal advice?
No. This article is educational, not legal advice. Consult counsel about your obligations under federal and state privacy and screening laws.