Lab 1 publishes the biggest ever content-level analysis of breached datasets, finding:
- Half of all data breaches contain U.S. Social Security Numbers
- Half of breaches leak bank statements, increasing fraud for employees and customers
- Customer and corporate PII exposed at concerningly high rates, with HR data and customer care data present in 82% and 67% of incidents
- The average attack blast radius has increased by 61% in three years
LONDON, July 22, 2025 (GLOBE NEWSWIRE) — Lab 1, the AI-powered Exposed Data Intelligence platform, today publishes the biggest ever content-level analysis of breached datasets to reveal the monumental risk of fraud to organizations, their employees and customers, with nearly all breached datasets including financial, HR and customer data.
Lab 1 uses AI agents to scrape breached datasets and analyze every file exposed, including unstructured files, like PDFs, emails, spreadsheets, and code files. While typically overlooked in data breach analysis techniques, the information can be leveraged for sophisticated cyberattacks, social engineering attacks, and fraud against companies and their customers.
Analyzing 141 million files leaked in the public domain from 1,297 data breach incidents, the first annual Anatomy of a Breach Report reveals:
Financial documents are exposing companies and their customers to fraud
Financial documents appear in 93% of incidents and account for 41% of all exposed files. Financial sensitive information types were also highly prevalent and reveal how personal data, as well as commercial information, is being leaked into the public domain. Bank statements, which enable identity fraud, were present in 49% of incidents, and IBANs, …