Identity theft tied to major data broker breaches has cost Americans more than $20 billion over the past decade, according to a Senate report. The figure includes losses from four major breaches: Equifax (2017), Exactis (2018), National Public Data (2023) and TransUnion (2025). Each incident exposed hundreds of millions of records, leading to financial fraud and identity misuse.
The federal estimate uses a $200 median loss per victim, but many cases involve far greater financial and time costs. Victims often spend weeks disputing fraudulent accounts, contacting lenders, and restoring their credit reports. Some lose tens of thousands of dollars, with fraud spreading across multiple accounts and lenders.
Credit monitoring and identity protection services can help detect and limit fraud early, reducing long-term damage. However, once stolen information is in the data broker ecosystem, it can resurface repeatedly, making recovery complex and prolonged.