VPN and Online Privacy Statistics 2026
This page collects current figures on VPN use and online privacy: how many people use a VPN and why, how worried people are about their personal data, what they do to protect it, how many data breaches are reported, what breaches cost organizations, and how much consumers lose to online fraud. Most figures cover the United States, with comparison data for the European Union, the United Kingdom, Canada and Australia. Data runs from 2023 to 2026, with most figures from 2025 and 2026.
By the HearSmart research desk · Updated November 13, 2026 · 53 numbers drawn from 14 publishers and reports
57 of 57 quotes matched to the publisher's page by our checker on November 13, 2026
Short answer
42% of US adults used a VPN in 2026, up from 32% in 2025, according to a Security.org survey, and 76.9% of EU internet users took steps to control access to their personal data in 2025 (Eurostat). The US recorded a record 3,322 data compromises in 2025 (Identity Theft Resource Center), and IBM puts the global average cost of a data breach at $4.99 million in its 2026 report.
Headline numbers
- 42%42% of US adults used a VPN for personal or work purposes in 2026, up from 32% in 2025, according to a Security.org survey of 1,008 adults.Security.org
- 43%43% of US VPN users relied on a free VPN in 2026, up from 28% in 2025.Security.org
- 71%71% of US adults said in 2023 that they are worried about how the government uses people's data, up from 64% in 2019.Pew Research Center
- 76.9%76.9% of EU internet users took steps to manage access to their personal data in 2025, up from 73.2% in 2023.Eurostat
- 3,322The US recorded a record 3,322 publicly reported data compromises in 2025, the third year in a row above 3,000.Identity Theft Resource Center (ITRC)
- 70%70% of US data breach notices in 2025 did not say how the attack happened, up from 65% in 2024.Identity Theft Resource Center (ITRC)
- $4.99 millionThe global average cost of a data breach was $4.99 million in IBM's 2026 report, which covers breaches from March 2025 to February 2026.IBM
- $20.877 billionAmericans reported $20.877 billion in internet crime losses to the FBI in 2025, a 26% increase from 2024, across 1,008,597 complaints.Federal Bureau of Investigation (FBI)
Reading the numbers
VPNs have become a mainstream privacy tool in the US. Security.org found that 42% of US adults used a VPN in its August 2026 survey, a 10-point jump from 2025, with personal-only use rising to 25%. Younger adults lead adoption, and general privacy (56%) and general security (51%) remain the main reasons. Free services made a comeback: 43% of VPN users relied on a free VPN in 2026, up from 28% a year earlier. Paying users reported spending $21 a month on average.
The demand for privacy tools tracks a broad lack of trust. Pew Research Center found in 2023 that 71% of Americans worry about how the government uses their data and 67% say they understand little or nothing about what companies do with it. Australia's privacy regulator (OAIC) reports the same direction in 2026: 87% of Australians are more concerned about privacy than five years ago, and only 4% consider AI companies trustworthy. People act on that concern in practical ways. Eurostat finds that 58.8% of EU internet users refused to let their data be used for advertising in 2025, and Pew finds that 68% of US social media users have changed their privacy settings.
Breaches keep coming. The Identity Theft Resource Center counted 3,322 US data compromises in 2025, a record and a 79% increase over five years, even though victim notices fell to 278.8 million because there were fewer mega breaches. Disclosure is getting worse: 70% of 2025 notices did not say how the attack happened. Verizon's 2026 Data Breach Investigations Report found ransomware in 48% of breaches and a human element in 62%.
The bill is large and rising again. IBM's 2026 Cost of a Data Breach Report puts the global average at $4.99 million, up from $4.44 million in the 2025 edition, when the US average reached a record $10.22 million. Consumers carry their own losses: the FBI received reports of $20.877 billion in internet crime losses in 2025 and the FTC recorded $15.9 billion in reported fraud losses. These are reported figures only, so the true totals are higher.
VPN use in the United States
- 1.
42% of US adults used a VPN for personal or work purposes in 2026, up from 32% in 2025, according to a Security.org survey of 1,008 adults.
Security.org, VPN Use in 2026: Trends, Statistics, and Consumer Sentiment (Sep 2026)
Exact wording at the source
42 percent of U.S. adults use a VPN for personal or work purposes, up from 32 percent in 2025.
- 2.
Personal-only VPN use among US adults rose eight percentage points to 25% in 2026, the main driver of the overall increase.
Security.org, VPN Use in 2026: Trends, Statistics, and Consumer Sentiment (Sep 2026)
Exact wording at the source
Personal-only use drove much of the increase, rising eight percentage points to 25 percent.
- 3.
39% of US adults aged 18 to 29 used a VPN only for personal reasons in 2026, compared with 15% of adults 60 and older.
Security.org, VPN Use in 2026: Trends, Statistics, and Consumer Sentiment (Sep 2026)
Exact wording at the source
Personal-only use was especially concentrated among younger adults: 39 percent of 18- to 29-year-olds used a VPN only for personal reasons, compared with 29 percent of adults ages 30 to 44, 18 percent of those ages 45 to 59, and 15 percent of adults 60 and older.
- 4.
General privacy (56%) and general security (51%) were the most common reasons US VPN users gave for using one in 2026.
Security.org, VPN Use in 2026: Trends, Statistics, and Consumer Sentiment (Sep 2026)
Exact wording at the source
General privacy (56 percent) and general security (51 percent) remained the most common reasons for using a VPN.
- 5.
43% of US VPN users relied on a free VPN in 2026, up from 28% in 2025.
Security.org, VPN Use in 2026: Trends, Statistics, and Consumer Sentiment (Sep 2026)
Exact wording at the source
Free VPN use rebounded from 28 percent of users in 2025 to 43 percent in 2026.
- 6.
US VPN users who paid for a service reported spending $21 per month on average in 2026.
Security.org, VPN Use in 2026: Trends, Statistics, and Consumer Sentiment (Sep 2026)
Exact wording at the source
Among users who paid, the average reported cost was $21 per month.
- 7.
NordVPN was the most-used VPN brand among US VPN users in 2026 at 24%, up from 17% in 2025.
Security.org, VPN Use in 2026: Trends, Statistics, and Consumer Sentiment (Sep 2026)
Exact wording at the source
NordVPN remained the most-used brand, rising from 17 percent of users in 2025 to 24 percent in 2026.
- 8.
36% of US adults surveyed in 2026 wrongly believed a VPN alone can protect a device from viruses or malware.
Security.org, VPN Use in 2026: Trends, Statistics, and Consumer Sentiment (Sep 2026)
Exact wording at the source
That last point is also the most common misconception: 36 percent of respondents incorrectly believed a VPN alone can protect a device from viruses or malware.
Chart
Most-used VPN brands among US VPN users, 2026
Share of US VPN users naming each brand in an August 2026 survey of 1,008 adults; multiple answers allowed.
- NordVPN24%
- Proton VPN15%
- Norton VPN9%
- Cisco Secure Client VPN9%
- ExpressVPN7%
Source: Security.org, VPN Use in 2026: Trends, Statistics, and Consumer Sentiment
Privacy concerns and trust in how data is used
- 9.
71% of US adults said in 2023 that they are worried about how the government uses people's data, up from 64% in 2019.
Pew Research Center, How Americans View Data Privacy (Oct 2023)
Exact wording at the source
The share who say they are worried about government use of people’s data has increased from 64% in 2019 to 71% today.
- 10.
67% of US adults said in 2023 that they understand little to nothing about what companies do with their personal data, up from 59% in 2019.
Pew Research Center, How Americans View Data Privacy (Oct 2023)
Exact wording at the source
Some 67% say they understand little to nothing about what companies are doing with their personal data, up from 59%.
- 11.
77% of US adults had little or no trust in social media company leaders to admit mistakes and take responsibility for data misuse in 2023.
Pew Research Center, How Americans View Data Privacy (Oct 2023)
Exact wording at the source
Some 77% of Americans have little or no trust in leaders of social media companies to publicly admit mistakes and take responsibility for data misuse.
- 12.
72% of US adults said in 2023 that there should be more regulation of what companies can do with personal data, while 7% wanted less.
Pew Research Center, How Americans View Data Privacy (Oct 2023)
Exact wording at the source
Some 72% of Americans say there should be more regulation than there is now; just 7% say there should be less.
- 13.
87% of Australian adults said in 2026 that they are more concerned about privacy than they were five years ago.
Office of the Australian Information Commissioner (OAIC), Australians more concerned about privacy as trust in AI languishes, survey finds (May 2026)
Exact wording at the source
Privacy is a growing concern for Australians, according to a new major survey released today by the Office of the Australian Information Commissioner (OAIC), with 87% of respondents indicating they are more concerned about privacy than they were 5 years ago.
- 14.
Only 4% of Australian adults considered AI companies trustworthy with their personal information in 2026.
Office of the Australian Information Commissioner (OAIC), Australians more concerned about privacy as trust in AI languishes, survey finds (May 2026)
Exact wording at the source
Privacy woes are increasing as trust in AI is at rock bottom, with just 4% believing that AI companies are worthy of their trust.
- 15.
Privacy complaints to Australia's information commissioner rose 73% in the 2025 to 2026 financial year to May 2026.
Office of the Australian Information Commissioner (OAIC), Australians more concerned about privacy as trust in AI languishes, survey finds (May 2026)
Exact wording at the source
The survey’s findings mirror the rise in privacy complaints received by the OAIC – which have increased by 73% this financial year to date.
- 16.
68% of Australian adults said in 2026 they would use more digital services that need personal information if they knew their data was handled fairly.
Office of the Australian Information Commissioner (OAIC), Australians more concerned about privacy as trust in AI languishes, survey finds (May 2026)
Exact wording at the source
Around two-thirds of Australians (68%) said they would be more likely to use digital services requiring personal information if they knew their data was handled fairly and responsibly.
How people protect their personal data online
- 17.
76.9% of EU internet users took steps to manage access to their personal data in 2025, up from 73.2% in 2023.
Eurostat, 76.9% of internet users protected their data in 2025 (Jan 2026)
Exact wording at the source
In 2025, 76.9% of EU internet users protected their data online by taking steps to manage access to their personal data, an increase of 3.7 percentage points (pp) compared with 2023 (73.2%).
- 18.
58.8% of EU internet users refused to allow their personal data to be used for advertising in 2025, and 56.2% restricted or refused access to their location.
Eurostat, 76.9% of internet users protected their data in 2025 (Jan 2026)
Exact wording at the source
Majority of internet users (58.8%) chose not to allow their personal data to be used for advertising, while 56.2% restricted or refused access to their geographical location.
- 19.
46.0% of EU internet users limited access to their social media profiles or shared online storage in 2025, up 5.0 percentage points from 2023.
Eurostat, 76.9% of internet users protected their data in 2025 (Jan 2026)
Exact wording at the source
Limiting access to social media profiles or shared online storage also became more common, with 46.0% of internet users taking this step, an increase of 5.0 pp compared with 2023.
- 20.
Finland had the highest share of internet users protecting their personal data in the EU in 2025 at 92.6%, followed by the Netherlands and Czechia.
Eurostat, 76.9% of internet users protected their data in 2025 (Jan 2026)
Exact wording at the source
The highest share of internet users who took measures to protect their data was recorded in Finland (92.6%), followed by the Netherlands (91.2%) and Czechia (90.3%)
- 21.
Romania had the lowest share of internet users protecting their personal data in the EU in 2025 at 56.0%, followed by Slovenia and Bulgaria.
Eurostat, 76.9% of internet users protected their data in 2025 (Jan 2026)
Exact wording at the source
In contrast, the lowest shares were recorded in Romania (56.0%), Slovenia (57.4%) and Bulgaria (62.0%).
- 22.
56% of US adults said in 2023 that they always, almost always or often click agree on privacy policies without reading them.
Pew Research Center, How Americans Protect Their Online Data (Oct 2023)
Exact wording at the source
Some 56% of Americans say they always, almost always or often click “agree” right away, without reading what privacy policies say.
- 23.
68% of US social media users said in 2023 that they had changed their social media privacy settings to manage their online privacy.
Pew Research Center, How Americans Protect Their Online Data (Oct 2023)
Exact wording at the source
Roughly seven-in-ten social media users (68%) say they have changed their social media privacy settings as a way to manage their online privacy.
- 24.
32% of US adults used a password manager in 2023, up from 20% in 2019.
Pew Research Center, How Americans Protect Their Online Data (Oct 2023)
Exact wording at the source
The share of Americans who say they use a password manager has risen from 20% in 2019 to 32% today.
Chart
Internet users protecting their personal data, highest and lowest EU countries, 2025
Share of internet users who took at least one step to manage access to their personal data in 2025; EU average 76.9%.
- Finland92.6%
- Netherlands91.2%
- Czechia90.3%
- Bulgaria62%
- Slovenia57.4%
- Romania56%
Source: Eurostat, 76.9% of internet users protected their data in 2025
Data breach counts in the United States
- 25.
The US recorded a record 3,322 publicly reported data compromises in 2025, the third year in a row above 3,000.
Identity Theft Resource Center (ITRC), 2025 Annual Data Breach Report (Jan 2026)
Exact wording at the source
The analysis of 2025 information shows that the frequency of data compromises remains at historic highs, with 3,322 total events over the past 12 months – a figure that cements a three-year trend of more than 3,000 annual compromises and sets a new high-water mark.
- 26.
US data breach victim notices fell 79% in 2025 to 278.8 million, from 1.36 billion in 2024.
Identity Theft Resource Center (ITRC), 2025 Annual Data Breach Report (Jan 2026)
Exact wording at the source
However, the number of individual victim notices saw a dramatic 79 percent (79%) decrease, falling from 1.36 billion in 2024 to 278.8 million in 2025.
- 27.
US data compromises rose 79% over five years, from 1,859 in 2021 to 3,322 in 2025.
Identity Theft Resource Center (ITRC), 2025 Annual Data Breach Report (Jan 2026)
Exact wording at the source
Over the five-year cycle, the frequency of data compromises has escalated by 79 percent (79%), growing from 1,859 incidents in 2021 to 3,322 in 2025.
- 28.
70% of US data breach notices in 2025 did not say how the attack happened, up from 65% in 2024.
Identity Theft Resource Center (ITRC), 2025 Annual Data Breach Report (Jan 2026)
Exact wording at the source
The percentage of notices withholding attack vector details rose from 65 percent (65%) in 2024 to 70 percent (70%) in 2025.
- 29.
About 30% of US data breaches in 2025 involved at least one third party, as supply chain breaches doubled between 2021 and 2025.
Identity Theft Resource Center (ITRC), 2025 Annual Data Breach Report (Jan 2026)
Exact wording at the source
The prevalence of supply chain breaches doubled between 2021 and 2025, with approximately 30 percent (30%) of all breaches now involving at least one third party.
- 30.
80% of US consumers in an ITRC survey had received a data breach notice in the previous 12 months.
Identity Theft Resource Center (ITRC), 2025 Annual Data Breach Report (Jan 2026)
Exact wording at the source
The survey reveals that data breaches are a near-universal experience for consumers, with 80 percent (80%) of respondents having received a data breach notice in the past 12 months.
- 31.
88% of US consumers who received a breach notice reported at least one negative consequence afterward, most often more phishing or scam attempts.
Identity Theft Resource Center (ITRC), 2025 Annual Data Breach Report (Jan 2026)
Exact wording at the source
A staggering 88 percent (88%) of people who received a data breach notice experienced at least one negative consequence after a breach, including an increase in “phishing” or scam attempts (53.7%), an increase in spam emails or robocalls (49.2%), and attempted takeover of an existing account (40.3%).
- 32.
After a breach notice, 60% of US consumers changed the password on the affected account and 49% set up passkeys, according to the ITRC.
Identity Theft Resource Center (ITRC), 2025 Annual Data Breach Report (Jan 2026)
Exact wording at the source
In response, consumers are largely taking action: 60 percent (60%) changed their password for the affected account, 49 percent (49%) set up passkeys and 47 percent (47%) stopped password reuse but only after being notified of their information being exposed.
Chart
Publicly reported US data compromises, 2021 to 2025
Data compromises tracked by the ITRC each calendar year, from Figure 1 of the 2025 annual report.
Source: Identity Theft Resource Center (ITRC), 2025 Annual Data Breach Report
The cost of a data breach and how breaches happen
- 33.
The global average cost of a data breach was $4.99 million in IBM's 2026 report, which covers breaches from March 2025 to February 2026.
IBM, IBM Study: One in Four Malicious Breaches are AI-Enabled, Costing Companies $6 Million on Average (Jul 2026)
Exact wording at the source
One in four malicious breaches were AI-enabled – a 56% increase over last year – and these breaches cost an average of $6 million, roughly $1 million more than the global breach average of $4.99 million, according to IBM's 2026 Cost of a Data Breach Report.
- 34.
AI-enabled breaches, mostly deepfake impersonation and AI-enabled malware, cost organizations $6 million on average in IBM's 2026 study.
IBM, IBM Study: One in Four Malicious Breaches are AI-Enabled, Costing Companies $6 Million on Average (Jul 2026)
Exact wording at the source
IBM Study: One in Four Malicious Breaches are AI-Enabled, Costing Companies $6 Million on Average
- 35.
Financial services breaches cost $6.3 million on average and energy breaches $5.2 million in IBM's 2026 study.
IBM, IBM Study: One in Four Malicious Breaches are AI-Enabled, Costing Companies $6 Million on Average (Jul 2026)
Exact wording at the source
Financial services breaches were reported to cost on average $6.3 million, while energy breaches cost on average $5.2 million.
- 36.
Only 37% of breached organizations in IBM's 2026 study encrypted sensitive data both at rest and in transit.
IBM, IBM Study: One in Four Malicious Breaches are AI-Enabled, Costing Companies $6 Million on Average (Jul 2026)
Exact wording at the source
Only 37% of breached organizations stated that they encrypt sensitive data both at rest and in transit, and just 34% have visibility into cryptographic assets.
- 37.
39% of organizations in IBM's 2026 study reported a ransomware incident, up from 34% the year before.
IBM, IBM Study: One in Four Malicious Breaches are AI-Enabled, Costing Companies $6 Million on Average (Jul 2026)
Exact wording at the source
Reported ransomware incidents rose compared to the year prior (39% vs. 34%), with attackers increasingly using AI to automate and scale.
- 38.
The average cost of a US data breach reached a record $10.22 million in IBM's 2025 report, while the global average fell to $4.44 million.
IBM, IBM Report: 13% Of Organizations Reported Breaches Of AI Models Or Applications, 97% Of Which Reported Lacking Proper AI Access Controls (Jul 2025)
Exact wording at the source
The global average cost of a data breach fell to $4.44 million , the first decline in five years, while the average U.S. cost of a breach reached a record $10.22 million .
- 39.
Ransomware was present in 48% of breaches in Verizon's 2026 Data Breach Investigations Report, up from 44% the year before.
Verizon, 2026 Data Breach Investigations Report: Executive Summary (May 2026)
Exact wording at the source
Ransomware grew again to 48% of all breaches, up from 44% from the previous year.
- 40.
69% of ransomware victims in Verizon's 2026 dataset did not pay the ransom.
Verizon, 2026 Data Breach Investigations Report: Executive Summary (May 2026)
Exact wording at the source
However, ransom payments have continued to decline among our dataset, as 69% of ransomware victims didn’t pay.
- 41.
A human element, such as error or social engineering, was present in 62% of breaches in Verizon's 2026 dataset, up from 60%.
Verizon, 2026 Data Breach Investigations Report: Executive Summary (May 2026)
Exact wording at the source
Human element was present in 62% of breaches, a slight increase from the previous year’s 60%.
Online fraud and cybercrime losses for consumers
- 42.
Americans reported $20.877 billion in internet crime losses to the FBI in 2025, a 26% increase from 2024, across 1,008,597 complaints.
Federal Bureau of Investigation (FBI), Internet Crime Report 2025 (Apr 2026)
Exact wording at the source
2025 complaint highlights: 1,008,597 complaints; $20.877 billion in losses; 26% increase in losses from 2024; $20,699 Average Loss.
- 43.
Cryptocurrency investment fraud caused $7.2 billion in reported losses to the FBI in 2025, more than any other crime type.
Federal Bureau of Investigation (FBI), Internet Crime Report 2025 (Apr 2026)
Exact wording at the source
Cryptocurrency investment fraud was the highest source of financial losses to Americans in 2025 with $7.2 billion reported in losses.
- 44.
Americans aged 60 and older filed 201,266 internet crime complaints with the FBI in 2025 and reported $7.7 billion in losses, the most of any age group.
Federal Bureau of Investigation (FBI), Internet Crime Report 2025 (Apr 2026)
Exact wording at the source
60+: 201,266 complaints, $7.7 billion in losses.
- 45.
US consumers filed 3 million fraud reports with the FTC in 2025 and reported $15.9 billion in losses, up from over $12 billion in 2024.
Federal Trade Commission (FTC), FTC Testifies to Joint Economic Committee on Agency's Efforts to Combat Fraud (Mar 2026)
Exact wording at the source
In 2025, the FTC received 3 million fraud reports from consumers, who reported $15.9 billion in losses—a substantial increase from the previous year when consumers submitted 2.6 million fraud reports and reported fraud losses of over $12 billion, according to the testimony.
- 46.
The FTC received more than 1 million reports about imposter scams in 2025, with more than $3.5 billion in reported losses.
Federal Trade Commission (FTC), FTC Testifies to Joint Economic Committee on Agency's Efforts to Combat Fraud (Mar 2026)
Exact wording at the source
The agency received more than 1 million reports about imposter scams, with consumers reporting more than $3.5 billion in losses.
- 47.
The Crime Survey for England and Wales estimated 4.2 million fraud incidents in the year ending March 2025.
Office for National Statistics (ONS), Nature of fraud and computer misuse in England and Wales: year ending March 2025 (Mar 2026)
Exact wording at the source
The Crime Survey for England and Wales (CSEW) year ending (YE) March 2025 estimated 4.2 million fraud incidents.
- 48.
Fraud incidents in England and Wales rose 31% in the year ending March 2025, from 3.2 million the year before.
Office for National Statistics (ONS), Nature of fraud and computer misuse in England and Wales: year ending March 2025 (Mar 2026)
Exact wording at the source
This was a 31% increase compared with the YE March 2024 survey (3.2 million incidents).
Chart
Internet crime losses reported to the FBI by victim age, 2025
Losses reported to the FBI Internet Crime Complaint Center in 2025, converted from billions to millions of dollars; only complaints with a stated age.
- Under 20$67.1 million
- 20 to 29$563 million
- 30 to 39$1,700 million
- 40 to 49$2,957 million
- 50 to 59$3,700 million
- 60+$7,700 million
Source: Federal Bureau of Investigation (FBI), Internet Crime Report 2025
Cyber incidents at businesses in the UK and Canada
- 49.
43% of UK businesses and 28% of charities identified a cyber security breach or attack in the 2025 to 2026 survey year.
UK Department for Science, Innovation and Technology, Cyber security breaches survey 2025/2026 (Apr 2026)
Exact wording at the source
Looked at another way, among the 43% of businesses and 28% of charities identifying any cyber security breaches or attacks, just under half (44% of businesses and 49% of charities) ended up being victims of cyber crime.
- 50.
38% of UK businesses experienced a phishing attack in the 2025 to 2026 survey year, the most common type of breach or attack.
UK Department for Science, Innovation and Technology, Cyber security breaches survey 2025/2026 (Apr 2026)
Exact wording at the source
Phishing attacks remained the most prevalent type of breach or attack by far (experienced by 38% of businesses and 25% of charities) and continued to be ascribed as the most disruptive type of breach or attack (69% of businesses and charities that experienced a breach or attack).
- 51.
16% of Canadian businesses were affected by cyber security incidents in 2025, unchanged from 2023 and down from 21% in 2019.
Statistics Canada, Canadian Survey of Cyber Security and Cybercrime, 2025 (Oct 2026)
Exact wording at the source
In 2025, about one in six (16%) Canadian businesses were impacted by cyber security incidents, unchanged from 2023, but five percentage points lower than 2019 (21%).
- 52.
Scams and fraud were a method of attack for 55% of Canadian businesses affected by cyber security incidents in 2025.
Statistics Canada, Canadian Survey of Cyber Security and Cybercrime, 2025 (Oct 2026)
Exact wording at the source
Scams and fraud were identified as a method of attack for over half (55%) of the businesses impacted by cyber security incidents in 2025.
- 53.
34% of Canadian businesses had cyber risk insurance in 2025, up from 22% in 2023 and 16% in 2021.
Statistics Canada, Canadian Survey of Cyber Security and Cybercrime, 2025 (Oct 2026)
Exact wording at the source
In 2025, over one-third (34%) of businesses indicated having cyber risk insurance, a rate that has increased from 2023 (22%) and more than doubled from 2021 (16%).
Questions readers ask
- What percentage of people use a VPN?
- In the US, 42% of adults used a VPN for personal or work purposes in 2026, up from 32% in 2025, according to a Security.org survey of 1,008 adults. Use is highest among adults aged 18 to 29, and 43% of users relied on a free VPN.
- Why do people use VPNs?
- General privacy (56%) and general security (51%) were the top reasons US VPN users gave in Security.org's 2026 survey. Accessing international media and reducing online tracking tied for third at 27% each.
- How many data breaches happen each year?
- The Identity Theft Resource Center counted a record 3,322 publicly reported US data compromises in 2025, up 79% from 1,859 in 2021. Victim notices fell to 278.8 million because 2025 had fewer mega breaches than 2024.
- How much does a data breach cost?
- IBM's 2026 Cost of a Data Breach Report puts the global average at $4.99 million, up from $4.44 million in the 2025 edition. US breaches are the costliest, at a record $10.22 million on average in IBM's 2025 report.
- Are people worried about online privacy?
- Yes. Pew Research Center found in 2023 that 71% of Americans worry about how the government uses their data and 72% want more regulation of companies. In Australia, 87% of adults told the OAIC in 2026 that they are more concerned about privacy than five years ago.
- How many people in Europe protect their personal data online?
- 76.9% of EU internet users took steps to manage access to their personal data in 2025, according to Eurostat. The share ranged from 92.6% in Finland to 56.0% in Romania, and refusing the use of personal data for advertising was the most common step at 58.8%.
Where these numbers come from
We used primary sources only: survey publishers (Security.org, Pew Research Center, the Office of the Australian Information Commissioner), statistical offices (Eurostat, Office for National Statistics, Statistics Canada), government agencies (FBI, FTC, UK Department for Science, Innovation and Technology), the Identity Theft Resource Center and the companies that run the breach studies (IBM with the Ponemon Institute, Verizon). Every figure links to the page it came from and carries the exact sentence that contains it. Samples differ: the VPN figures come from one online survey of about 1,000 US adults that blocked VPN connections, Pew's privacy figures date from 2023, IBM averages cover organizations that agreed to take part, and FBI and FTC losses count only what victims reported. We could not include Ofcom's UK VPN figures because its pages did not load for our source checker. Breach counts and fraud losses from different publishers measure different things and should not be added together. We store the sentence each number appears in, and a script loads the publisher's page again to make sure that sentence is still there. Our methodology has the details.
Sources
- Eurostat. 76.9% of internet users protected their data in 2025 (Jan 2026).
- Federal Bureau of Investigation (FBI). Internet Crime Report 2025 (Apr 2026).
- Federal Trade Commission (FTC). FTC Testifies to Joint Economic Committee on Agency's Efforts to Combat Fraud (Mar 2026).
- IBM. IBM Study: One in Four Malicious Breaches are AI-Enabled, Costing Companies $6 Million on Average (Jul 2026).
- IBM. IBM Report: 13% Of Organizations Reported Breaches Of AI Models Or Applications, 97% Of Which Reported Lacking Proper AI Access Controls (Jul 2025).
- Identity Theft Resource Center (ITRC). 2025 Annual Data Breach Report (Jan 2026).
- Office for National Statistics (ONS). Nature of fraud and computer misuse in England and Wales: year ending March 2025 (Mar 2026).
- Office of the Australian Information Commissioner (OAIC). Australians more concerned about privacy as trust in AI languishes, survey finds (May 2026).
- Pew Research Center. How Americans View Data Privacy (Oct 2023).
- Pew Research Center. How Americans Protect Their Online Data (Oct 2023).
- Security.org. VPN Use in 2026: Trends, Statistics, and Consumer Sentiment (Sep 2026).
- Statistics Canada. Canadian Survey of Cyber Security and Cybercrime, 2025 (Oct 2026).
- UK Department for Science, Innovation and Technology. Cyber security breaches survey 2025/2026 (Apr 2026).
- Verizon. 2026 Data Breach Investigations Report: Executive Summary (May 2026).
Citing this page
Link to this page or to a single numbered figure. If you reuse a number, name the organization that released it in the first place.
HearSmart. (2026, November 13). VPN and Online Privacy Statistics 2026. https://hearsmart.org/vpn-and-online-privacy-statistics
Found a number that changed or a source that moved? Email editorial@hearsmart.org. We plan to check this page again by January 12, 2027.