Finance
45 organizations, 103 confirmed incidents.
Finance covers banks, credit unions, broker-dealers, payment processors and other lenders, along with the fintech vendors that handle money movement on their behalf. These organizations typically hold account numbers, transaction histories and other data used to open or service a financial account. A non-bank financial institution's information-security obligations fall under the FTC's Safeguards Rule (16 CFR Part 314), written under the Gramm-Leach-Bliley Act to cover mortgage lenders, finance companies and similar non-bank lenders directly; a bank itself answers to its own federal banking regulator instead, and general state breach-notification laws apply across the sector on top of these rules.
Incidents by year
| Year | Confirmed incidents |
|---|---|
| 2026 | 19 |
| 2025 | 12 |
| 2024 | 12 |
| 2023 | 13 |
| 2022 | 9 |
| 2021 | 13 |
| 2020 | 12 |
| 2019 | 8 |
| 2018 | 1 |
| 2017 | 1 |
| 2014 | 2 |
| 2012 | 1 |
Top organizations by confirmed incidents
Questions and answers
How many confirmed incidents involve Finance organizations on Breach Census?
103 confirmed incidents across 45 organizations in the Finance sector are recorded on Breach Census.
Which year had the most confirmed Finance incidents?
2026, with 19 confirmed incidents, the most of any year on record for this sector.
Which attack types are most common in the Finance sector?
Among Finance sector incidents that carry an attack-type classification, the most common are Unauthorized Access/Disclosure, Malware Deployment, Phishing Attack.
What counts as a confirmed incident for the Finance sector?
An incident counts here once its primary organization carries the Finance sector label and the incident itself has reached the confirmed status described on the Methodology page; a bare claim or press report is not enough.