A new wave of sophisticated attacks driven by artificial intelligence is expected in 2026, according to Experian’s annual data breach industry forecast.

“From synthetic profiles and autonomous AI agents to shape-shifting malware and even brain-computer interface vulnerabilities, the 2026 predictions point to a future where cyber attacks are more personalized, persistent, and technologically advanced than ever before,” the report stated.

More than 8,000 global data breaches were reported in the first half of 2025, with an estimated 345 million records exposed.

“Technology is evolving at breakneck speed, and cybercriminals are often the first to adopt tools like AI to outpace defenses and exploit vulnerabilities,” said Michael Bruemmer, vice president of Global Data Breach Resolution at Experian. “It’s an uphill battle, but organizations can also harness these same innovations to strengthen their security posture. With the right preparation and use of technology, companies can be in a solid position to combat attacks, but they should also be ready to deal with the fallout of a security incident.”

Among Experian clients, the top countries hit the hardest are the United States, the United Kingdom and Canada.

Many consumers feel the impact of attacks and are anxious about cyber threats worsening.

Younger generations are increasingly vulnerable to scams, while many victims feel unsupported after their data is compromised.

Consumers question whether the companies they trust are ready to defend against sophisticated cyber threats.

One in four millennial adults surveyed reported being a victim of identity theft in the past year.

Nearly a quarter say they’ve fallen for a phishing attack at home or work in the past 12 months, and more than four in five are concerned about AI being used to create fake identities that are indistinguishable from real people.

Key U.S. findings:

• More than one in three (35 percent) adults worry about being found personally liable for monetary loss as a result of a cybersecurity mistake at work.
• Of those surveyed, 69 percent do not believe their bank or retailer is adequately prepared to defend against AI-driven cyber attacks, or they’re unsure.
• Over three-quarters (76 percent) believe that cybercrime will continue to increase and be impossible to slow down because of AI.

Top UK results:

• A quarter of millennial adults (25 percent) say they’ve been a victim of identity theft in the past year.
• One in three (33 percent) U.K. adults worry about damaging their professional reputation due to a cybersecurity mistake at work.
• Among those who’ve had their data stolen or exposed in a data breach, more than three in five (62 percent) did not say the organization provided adequate support.

“We’re entering a new era where cyber attacks are no longer just about stealing data, they’re about manipulating reality,” said Jim Steven, head of Crisis and Data Response Services at Experian Global Data Breach Resolution in the United Kingdom. “Organizations must prepare for threats that are faster, smarter, and harder to detect. The time to act is now.”