Lab 1: median breach blast radius hit 542 organizations in 2026

Lab 1's 2026 Anatomy of a Breach report found the median breach exposed 542 organizations beyond the initial victim, up from 482 in 2025. The median breach size rose to 29.8GB and 32,734 files; AI agents analyzed 328 million files across 2,089 datasets, with 44% containing financial data.

• Median breach size rose to 29.8GB (+122%) and 32,734 files (+45%)
• 44% of 328 million breached files hold financial data, 9% hold HR data
• Private cryptographic keys appeared in about 15% of incidents
• Seven threat groups sell breach indexing as a service to criminals