Data Breaches Now Expose Hundreds of Organizations
New research shows that cyber attackers are increasingly using AI to weaponize stolen data across interconnected networks.
Updated on Oct. 22, 2026 in Cybersecurity
Live Poll
Are you confident your personal data is secure against modern AI-assisted cyber threats?
A new report from Lab 1 reveals that the median data breach now exposes information from 542 organizations. This shift is driven by threat actors utilizing AI agents and indexing services to rapidly process stolen datasets.
Why it matters
The effort required to convert raw stolen data into actionable criminal intelligence has significantly decreased. This efficiency has caused data theft to grow from 25% of the value of large cyber claims in 2024 to 40% in 2025.
Researchers analyzed 328 million files across 2,089 incidents, finding that 44% contained financial data and 15% included critical cryptographic private keys. Specialized services like Leak Bazaar now organize these files into 16 buyer-specific categories.
The players
Lab 1
Lab 1 is a research organization based in London that monitors trends in cybersecurity and data breaches.
Leak Bazaar
Leak Bazaar is a criminal indexing service that organizes stolen data into specific categories for buyers.
The details
Criminal groups are evolving, with the number of actors conducting systematic analysis of breached datasets rising from one in 2024 to seven by mid-2026. These groups leverage indexing services to target sectors like insurance, where breaches impact a median of 727 organizations.
Timeline
In 2024, data theft accounted for 25% of the value of large cyber claims.
Data theft represented 40% of the value of large cyber claims throughout 2025.
Researchers analyzed data breaches across 13,436 organizations between 2025 and 2026.
The Leak Bazaar criminal indexing service launched in March 2026.
The analysis report was published on October 22, 2026.
The Tech Race
This research highlights a shift from simple data exfiltration to the industrial-scale analysis of stolen information enabled by AI agents. This evolution forces organizations to move beyond perimeter defense as the weaponization of stolen data increasingly targets entire supply chains.
Businesses must account for the fact that a single breach now endangers hundreds of their partners and clients simultaneously. Security teams should prioritize the protection of cryptographic keys, which were found in 15% of recent incidents, to mitigate the risk of wider network compromise.
The takeaway
Organizations should assume their data is interconnected and that a breach at a vendor or partner is a direct threat to their own security. Companies should implement more robust file-level encryption and limit the internal exposure of sensitive cryptographic assets.
Further reading
Learn more about the latest threats and defense strategies in the Cybersecurity section.
Live Poll
Are you confident your personal data is secure against modern AI-assisted cyber threats?
