Kroll Report Finds 69% of Firms Hit by Breach
A global risk advisory firm's annual Data Breach Outlook reports that most surveyed organisations suffered a breach in the past year, with many breached repeatedly.
Updated on Nov. 5, 2026 in Cybersecurity
Live Poll
Do you trust companies to protect your data when they rely on outside vendors?
Kroll's Data Breach Outlook 2026 found that 69% of organisations surveyed experienced a data breach in the past year. The firm also reported that 34% of those organisations were breached more than once.
Why it matters
The findings show that a single supplier breach can cascade across many organisations, with Kroll's data indicating one vendor incident can trigger dozens or even hundreds of cyber insurance claims. Dependence on technology vendors was named by 41% of respondents as a top-four challenge in breach-response decisions.
The figures come from Kroll's own survey and incident-handling records rather than an independent audit. Of individuals affected by Kroll-handled incidents, 79% were hit by a technology-sector breach, compared with 9% finance, 6% insurance and 5% healthcare.
The players
Kroll
Kroll is a global risk advisory firm whose incident-response and data-breach practice produces the annual Data Breach Outlook report.
The details
Kroll's Data Breach Outlook 2026 combines a survey of organisations with an analysis of incidents the firm handled between June 2025 and June 2026. The report highlights third-party exposure as the dominant pathway, with the technology sector accounting for most affected individuals. Kroll expects artificial intelligence to feature more prominently in its next Data Breach Outlook.
Timeline
June 2025 to June 2026: period of Kroll-handled incidents analysed in the research.
2026: Kroll's Data Breach Outlook 2026 published.
Next year: Kroll expects AI to feature more prominently in its following Data Breach Outlook.
Big Picture
Kroll's annual Data Breach Outlook series has tracked how breaches spread through vendors, and the 2026 edition extends that line by quantifying repeat breaches, with 34% of surveyed organisations hit more than once. The emphasis on supplier dependence follows the pattern of supply-chain compromises that now dominate breach-response planning.
Organisations that rely on outside technology vendors face a higher chance of breach exposure, which means reviewing vendor access and incident-response plans is a practical priority. Individuals whose data is held by technology providers may be affected by a breach they never directly caused.
The takeaway
Because a single vendor compromise can reach many organisations at once, reviewing third-party access and rehearsing breach response across suppliers offers the most direct protection. Repeat breaches suggest that remediation after one incident needs to be sustained rather than one-time.
Further reading
For more on how these threats are tracked and defended against, see the Cybersecurity section.
Source note: This article includes information reported by Consultancy.
Live Poll
Do you trust companies to protect your data when they rely on outside vendors?
