Data types
11 categories of personal data reported involved in confirmed incidents on Breach Census.
A confirmed incident's reported data types come from the source that confirmed it (a state attorney general notice or an HHS OCR filing, currently) and are recorded exactly as that source described them, mapped onto a fixed set of categories below.
| Data type | Confirmed incidents |
|---|---|
| Social Security number | 4,213 |
| Bank account or payment card number | 2,027 |
| Driver's license number | 1,865 |
| Medical information | 1,395 |
| Credit or debit card number | 1,001 |
| Full name | 813 |
| Home or mailing address | 403 |
| Date of birth | 393 |
| Passport or government ID number | 359 |
| Health insurance information | 317 |
| Other reported data type | 121 |
Questions and answers
Why do most incidents have no data type listed?
Reported data types are only populated where the confirming source itself states them in a structured way. Most incidents on Breach Census are confirmed by a source that does not, so their data types stay empty rather than guessed.
Does a data-type page give me advice specific to my situation?
No. Each page links general, publicly available guidance for that data type. It is not advice about any specific incident or individual.