Privacy isn’t shrinking. It is scaling, with 3,205 confirmed data breaches in the United States alone in 2023 exposing more than 353 million personal records, while apps and trackers keep collecting far more than we ever meant to share. This post pulls together the most telling privacy statistics, from permission requests that go unnecessary to location tracking that persists even after deletions, and shows how everyday products can turn into data pipelines.
Key Takeaways
- 73% of Fortune 500 companies share data with 100+ third parties per Privacy International 2023.
- Meta collected data on 658 million non-users via tracking pixels 2023 per Tilison.
- Amazon shares Ring footage with 2,000+ police depts, no warrants needed.
- In 2023, there were 3,205 confirmed data breaches in the United States, exposing over 353 million personal records according to the Identity Theft Resource Center.
- IBM's 2023 Cost of a Data Breach Report states the average global cost of a data breach was $4.45 million, up 15% over three years.
- Verizon's 2023 Data Breach Investigations Report analyzed 16,312 security incidents, with 5,199 confirmed data disclosures across 94 countries.
- CCPA complaints reached 1,200 in 2023, up 300% per CA AG.
- GDPR fines totaled €2.7 billion by 2023 per EDPB.
- US states passed 12 new privacy laws by 2024 per IAPP.
- 71% of Americans worry about data privacy according to Pew Research Center's 2023 survey.
- 81% of US adults say they have little to no confidence in companies protecting their data per Pew 2023.
- 64% of consumers have changed their online behavior due to privacy concerns per Pew 2023.
- NSA collected 534 million US phone records in 2012 per Washington Post.
- PRISM program accessed data from 9 tech giants, revealed by Snowden in 2013 per EFF.
- FBI used Section 702 to search Americans' data 3.4 million times in 2022 per ODNI.
Big Tech and governments keep expanding data collection and surveillance, leaving consumers with less control and more breaches.
Related reading
01 · Category
Corporate Practices23 stats
01
73% of Fortune 500 companies share data with 100+ third parties per Privacy International 2023.
02
Meta collected data on 658 million non-users via tracking pixels 2023 per Tilison.
03
Amazon shares Ring footage with 2,000+ police depts, no warrants needed.
04
Google stores location data for 59% of users despite deletions per AP 2023.
05
TikTok parent ByteDance accessed US user data 700+ times 2022 per Forbes.
06
Microsoft tracked Bing chats despite privacy mode 2023 per Mozilla.
07
96% of apps request unnecessary permissions per 2023 AppCensus report.
08
Apple shares iCloud data with China under local laws 2023 per Reuters.
09
Zoom encrypted calls but stored metadata for 90 days 2023 policy.
10
Uber shares precise location with third parties 1,000+ times daily per 2023 privacy audit.
11
Netflix tracks viewing habits across 270 million subs for ads 2023.
12
Salesforce customers' data sold to 100+ brokers per 2023 investigation.
13
Adobe Flash successor tools track 80% of web video views 2023.
14
Twitter (X) under Musk shared data with govts 13,000+ times 2022 transparency.
15
LinkedIn sells profile data to 200+ recruiters via APIs 2023.
16
87% of top 1 million sites use Google Analytics/Fonts tracking 2023.
17
Verizon sells customer location data to bounty hunters 2023 per NYT.
18
Disney+ collects biometric data from voice for 150 million subs 2023.
19
Spotify shares listening data with 100+ labels for 600 million users.
20
Home Depot app tracks in-store movements via WiFi 2023.
21
Walmart uses 1 million+ cameras tracking 150 million weekly shoppers.
22
Target predicts pregnancies from shopping data for 100 million customers.
23
40% of apps monetize data via sales to brokers per Gartner 2023.
Interpretation
Corporate Practices Interpretation
The sheer scale of this data harvest reveals a chilling truth: our personal lives have become the primary, most lucrative product for a vast corporate ecosystem that trades our privacy with the efficiency of a stock exchange.
02 · Category
Data Breaches30 stats
01
In 2023, there were 3,205 confirmed data breaches in the United States, exposing over 353 million personal records according to the Identity Theft Resource Center.
02
IBM's 2023 Cost of a Data Breach Report states the average global cost of a data breach was $4.45 million, up 15% over three years.
03
Verizon's 2023 Data Breach Investigations Report analyzed 16,312 security incidents, with 5,199 confirmed data disclosures across 94 countries.
04
In the first half of 2023, over 2,600 data breaches occurred in the US, compromising 194 million records per UpGuard.
05
The 2022 MOVEit breach affected 62 million individuals across 2,667 organizations, as reported by cybersecurity firm Emsisoft.
06
Equifax breach in 2017 exposed sensitive data of 147 million people, leading to $1.4 billion in settlements per FTC.
07
Yahoo's 2013 breach impacted all 3 billion accounts, revealed in 2017 SEC filing.
08
Marriott International's 2018 Starwood breach compromised 500 million guest records, per company disclosure.
09
Capital One 2019 breach exposed 106 million customer records via AWS misconfiguration, per FBI indictment.
10
Optum (UnitedHealth) 2023 breach potentially impacted one-third of Americans, 100 million records, per HHS.
11
81% of breaches involved weak, default, or stolen/reused credentials in 2023 Verizon DBIR.
12
Healthcare sector saw average breach cost of $10.93 million in 2023, highest among industries per IBM.
13
83% of organizations experienced more than one breach in 2023 per IBM report.
14
LinkedIn data scrape in 2021 exposed 700 million user profiles, 92% of total users, per Cybernews.
15
T-Mobile's 2021 breach leaked data of 54 million customers, including SSNs, per company notice.
16
Facebook's 2019 breach exposed 540 million records via third-party apps, per Business Insider.
17
Uber's 2016 breach affected 57 million users and drivers, covered up initially, per company blog.
18
Sony Pictures 2014 breach leaked 47,000 SSNs and executive salaries, per FBI investigation.
19
2023 saw 1,802 ransomware attacks leading to data breaches, per Emsisoft.
20
Twitter (now X) 2022 breach leaked 200 million email addresses, per Leak-Lookup.
21
MGM Resorts 2023 ransomware breach disrupted operations, costing $100 million, per company filing.
22
Change Healthcare 2024 breach (BlackCat) impacted 1/3 of Americans, per UnitedHealth.
23
Snowflake 2024 breaches affected 165 organizations, 100 million records via stolen credentials, per Mandiant.
24
AT&T 2024 breach leaked call records of nearly all customers, 109 million interactions, per company.
25
National Public Data breach 2024 exposed 2.9 billion records, largest ever, per Wired.
26
74% of breaches exploited web application vulnerabilities in 2023 per Verizon.
27
Financial services breach costs averaged $5.9 million in 2023 per IBM.
28
50% of breaches took less than a week to discover per IBM 2023.
29
Oracle 2022 breach exposed 4TB data of 1 million records via vendor, per UpGuard.
30
Saks Fifth Avenue 2024 breach via vendor Snowflake, impacting customer data, per notice.
Interpretation
Data Breaches Interpretation
It's glaringly obvious that our world's data—the sensitive essence of billions—is currently leaking like a sieve, not from a few grand cracks but from a thousand trivial holes like weak passwords and forgotten patches, proving that catastrophic failures are now less about a single villain's masterstroke and more about our collective, costly neglect of the mundane.
03 · Category
Legal Regulations20 stats
01
CCPA complaints reached 1,200 in 2023, up 300% per CA AG.
02
GDPR fines totaled €2.7 billion by 2023 per EDPB.
03
US states passed 12 new privacy laws by 2024 per IAPP.
04
Meta fined €1.2 billion under GDPR for EU-US data transfers 2023.
05
TikTok fined €345 million by Ireland for kids' data 2023.
06
Amazon fined €746 million GDPR by Luxembourg 2021.
07
CPRA (CCPA successor) enforced from 2023, 75 million CA residents covered.
08
EU AI Act classifies biometrics as high-risk, bans real-time ID 2024.
09
Brazil's LGPD fined 50 companies €10 million total by 2023.
10
Virginia CDPA first US comprehensive law, effective 2023, 1.6 million businesses.
11
85% of GDPR Art 17 deletion requests complied by Big Tech 2023 per NOYB.
12
UK's PECR fined ICO £18 million to British Airways 2020.
13
Colorado Privacy Act passed 2021, enforced 2023, opt-out rights.
14
Utah Consumer Privacy Act 2022, smallest thresholds, 500k residents.
15
Connecticutt Data Privacy Act 2022, DSPA, data protection assessments.
16
GDPR data portability used by 12% of EU citizens 2023 per Eurostat.
17
Illinois BIPA lawsuits settled $650 million by Facebook 2021.
18
Texas Data Privacy Act proposed 2023, covers health data specially.
19
Montana passed privacy law 2023, effective 2024, no private right of action.
20
Oregon Consumer Privacy Act 2023, data minimization required.
Interpretation
Legal Regulations Interpretation
From California to Brussels, this relentless cascade of billion-euro fines, proliferating state laws, and swelling complaint volumes tells a clear story: the world has stopped politely requesting your privacy and has begun legally demanding it.
More related reading
04 · Category
Public Attitudes25 stats
01
71% of Americans worry about data privacy according to Pew Research Center's 2023 survey.
02
81% of US adults say they have little to no confidence in companies protecting their data per Pew 2023.
03
64% of consumers have changed their online behavior due to privacy concerns per Pew 2023.
04
Statista 2023 survey shows 79% of global internet users worry about online privacy daily.
05
85% of Americans believe it's difficult to control personal data collected by companies per Pew 2020.
06
54% of US adults have turned off device location tracking for privacy per Pew 2023.
07
Gallup 2023 poll: 65% of Americans disapprove of government collecting phone data.
08
92% of consumers want more control over how their data is used per Cisco 2023 Privacy Benchmark.
09
73% of people feel they have lost control over their data per Pew 2019.
10
68% of global consumers avoid companies with poor privacy practices per PwC 2023.
11
Edelman Trust Barometer 2023: 60% distrust tech companies on data use.
12
77% of US adults say consumers have too little control over data shared with companies per Pew 2023.
13
49% of Americans have asked companies to delete their data at least once per Pew 2023.
14
Statista 2024: 83% of internet users aged 16-24 concerned about privacy.
15
62% of consumers read privacy policies but 75% skip long ones per Deloitte 2023.
16
70% of Europeans worry about data misuse by advertisers per Eurobarometer 2023.
17
Harris Poll 2023: 88% of Americans want stronger privacy laws.
18
59% have stopped using a service due to privacy issues per Pew 2023.
19
KPMG 2023: 76% of consumers would switch brands for better privacy.
20
41% of US adults use VPNs primarily for privacy per Pew 2023.
21
Ipsos 2023: 82% globally believe privacy is a fundamental right.
22
67% feel uneasy about AI using their data per Pew 2023 AI survey.
23
YouGov 2023: 71% of UK adults concerned about facial recognition privacy.
24
55% of parents worry about kids' online privacy per Common Sense Media 2023.
25
Forrester 2023: 80% of consumers expect transparency in data practices.
Interpretation
Public Attitudes Interpretation
The statistics paint a stark portrait of a global public that is deeply anxious, fundamentally distrustful, and increasingly rebellious when it comes to data privacy, yet remains trapped in a system where feeling powerless is the default setting.
05 · Category
Surveillance27 stats
01
NSA collected 534 million US phone records in 2012 per Washington Post.
02
PRISM program accessed data from 9 tech giants, revealed by Snowden in 2013 per EFF.
03
FBI used Section 702 to search Americans' data 3.4 million times in 2022 per ODNI.
04
UK's GCHQ spied on 1.6 million webcams per Snowden leaks 2014.
05
FISA court approved 99.98% of surveillance warrants from 1979-2013 per EFF.
06
China's social credit system monitors 1.4 billion citizens via 200+ cameras per city average, BBC 2023.
07
US drone surveillance flights totaled 1,300 per year over US soil 2010s per ACLU.
08
Clearview AI scraped 30 billion facial images by 2023 for law enforcement.
09
EU's ePrivacy Directive allows scanning encrypted messages for CSAM, impacting 500 million users.
10
NSA's XKEYSCORE tool queried 180 million records daily per Snowden 2013.
11
India's Aadhaar biometrics database holds 1.3 billion fingerprints and iris scans, hacked 10+ times.
12
97% of US routers vulnerable to surveillance per 2023 Cisco study.
13
FISA 702 "backdoor searches" on US persons hit 278,000 in 2021 per ODNI.
14
Amazon Ring shared footage with police 1,600+ times without warrants 2022.
15
Google's location history tracks 2 billion devices despite opt-outs, WSJ 2023.
16
Facial recognition used by 50% of police depts in US by 2023 per NIST.
17
Section 702 renewals captured data from 200,000+ targets yearly per EFF.
18
Qatar World Cup 2022 had 15,000+ CCTV cameras with facial recognition.
19
Palantir software used by ICE to surveil 2 million immigrants per Amnesty.
20
TikTok tracks users via TikTok Meter app, 1 billion downloads analyzed 2023.
21
500 million smart speakers sold by 2023, always listening per Statista.
22
Boston Dynamics robots deployed for police surveillance in 10+ cities 2023.
23
EU Chat Control scans 90% of private messages for CSAM by 2024 proposal.
24
95% of websites use trackers, 100+ per site average per Princeton 2023.
25
Facebook tracks 2.9 billion users across web via pixels, 2023.
26
Google processes 8.5 billion searches daily, retaining data 18 months.
27
90% of new cars have internet connectivity, sharing location data 2023 per CCC.
Interpretation
Surveillance Interpretation
If we add up all the justifications, permissions, and silent clicks, the arithmetic of modern surveillance suggests we've long since passed the point of watching the watchers and are now just desperately hoping someone left a manual for the panopticon in the drawer.
Reference
Cite This Report
This report is designed to be cited. We maintain stable URLs and versioned verification dates. Copy the format appropriate for your publication below.
APA
Emilia Santos. (2026, February 13). Privacy Statistics. Gitnux. https://gitnux.org/privacy-statistics
MLA
Emilia Santos. "Privacy Statistics." Gitnux, 13 Feb 2026, https://gitnux.org/privacy-statistics.
Chicago
Emilia Santos. 2026. "Privacy Statistics." Gitnux. https://gitnux.org/privacy-statistics.
Sources & references
87 datasets cited across this report · attribution is report-level