According to Kroll’s Data Breach Outlook 2026, 69% of organisations surveyed experienced a data breach in the past year, with over a third 34% breached more than once.
As AI agents are given more access to systems and sensitive data, breach risk also rises across both human on non-human identities.
Data and identity governance are becoming even more complex, and we expect AI to feature more prominently in Kroll’s Data Breach Outlook next year, both as a tool used by attackers and as a source of exposure for businesses adopting it.”
Of the incidents handled by Kroll in the 12 months between June 2025 and June 2026, 69% of affected individuals were impacted by a third-party breach.
Katherine Keefe, global cyber insurance industry lead at Kroll, concluded, “Kroll’s breach data shows a single supplier breach can trigger dozens or even hundreds of cyber insurance claims from businesses whose only connection is that they use the same provider.