Hackers are shifting from mega-breaches to small, hard-to-detect attacks

Experts warn that protecting your identity is no longer optional. According to a new report from the Identity Theft Resource Center, cyberattacks are becoming more precise, more automated and harder to detect, even as the number of breach alerts sent to consumers drops. Although the number of victim notices dropped sharply in the past year, from 1.36 billion in 2024 to about 279 million in 2025, researchers say the decline doesn’t mean fewer attacks. Instead, hackers are moving away from “mega breaches” and toward smaller, more targeted attacks that are harder to detect.While ransomware attacks declined for the second year in a row, the ITRC Data Breach Report highlights a growing threat of using artificial intelligence to exploit “previously compromised data” again.What it means for youThis shift requires a smarter defense. Experts recommend: Freezing your credit files Replacing vulnerable passwords with highly secure passkeys. Avoid reusing passwords across multiple accounts.The report also warns of financial and mental health risks. Among victims who contacted the ITRC, one in five victims reported at least a $100,000 loss, and 67% said they considered self-harm after experiencing identity theft. Where to get helpIf you’ve experienced identity theft, you can call or text the Identity Theft Resource Center at 888-400-5530 or visit identitytheft.gov to report a theft and get a recovery plan.