13 user accounts were leaked in India every minute over Q2 2025

The latest study by cybersecurity company Surfshark ranks India as the 3rd most breached country in Q2 2025, with 1.7 million leaked accounts. Between April and June, 93.6 million accounts were compromised globally, with the United States accounting for 45% of all breaches during this period. France ranked second, followed by India, Germany, and Israel.

“In today’s digital era, we constantly share personal information to perform everyday tasks – whether it’s providing your name and address for food delivery or your phone number when booking a haircut. However, there’s no guarantee that businesses are safeguarding this data,” said Sarunas Sereika, Product Manager at Surfshark. “If it falls into the wrong hands, it can be used for identity theft, targeted scams on social media, or sold on the dark web for further illicit activities.”

Cyber Technology Insights : Movate and Anzenna Forge Strategic Partnership to Redefine Insider Risk Governance in the AI Era

Data breach statistics over the years

Surfshark’s analysis of data breaches since 2004 shows India is the 1st in Southern Asia, with 427M compromised user accounts. A total of 126.9M unique emails were breached from India.

172.6M passwords were leaked together with Indian accounts, putting 40% of breached users in danger of account take over that might lead to identity theft, extortion or other cybercrimes. Statistically, 29 out of 100 Indian people has been affected by data breaches, one of the highest rates in Southern Asia (5th).

India’s full profile in the Global Data Breach Monitoring project can be found here.

Which countries suffered the most data breaches in Q2 2025?

In descending order, the ten most breached countries in Q2 2025 were the US (42.5M), France (11.4M), India (1.7M), Germany (1.3M), Israel (1.2M), Canada (968.6k), the UK (944k), Thailand (889.1k), Brazil (639.6k), and China (578.3k).

The countries with the highest breach density over Q2 2025 (number of leaked accounts per 1,000 residents): France (172), Israel (130), the US (123), Singapore (26), Canada (24), South Sudan (23), Belgium (21), Ireland (16), Switzerland (16) and Germany (15).

Cyber Technology Insights : CYBER.ORG Launches Cybersecurity Job Corps Pilot in D.C. School District

METHODOLOGY

A data breach happens when confidential and sensitive data gets exposed to unauthorized third parties. In this study, we treat every breached or leaked email address used to register for online services as a separate user account, which may have been leaked with additional details, such as password, phone number, IP address, zip code, and more.

The data was collected by our independent partners from 29,000 publicly available databases and aggregated by email address. The data was anonymized before being analyzed by Surfshark’s research team for statistical insights. Countries with populations under one million were excluded from the analysis.

Cyber Technology Insights : Donoma Puts the Brakes on Enterprise Data Loss with Next-Generation Privacy-Enhancing Technology

To participate in our interviews, please write to our CyberTech Media Room at sudipto@intentamplify.com