Average downstream breach victims per vendor increased from 2.46 in 2021 to 5.28 in 2025.

433 million people are publicly disclosed as impacted by third-party breaches.