600 million records, no verdict
The three biggest data breaches on the list did not take designs or formulas. They took people’s records: about 606.8 million of them. Pour them out, then count how many verdicts followed.
Updated · 5 sources cited
One square is 100,000 records
Marriott (Starwood) · up to 383 million guest records
Taken over four years, including 5.25 million unencrypted passport numbers. First put at up to 500 million. In December 2018 the US secretary of state said China was behind it. NPR, Fox Business, Al Jazeera
Equifax · about 145 million Americans
Names, birth dates and Social Security numbers, the indictment says. Four military personnel were charged in 2020. US Attorney, N.D. Georgia
Anthem · 78.8 million people
Names, health ID numbers, birth dates, Social Security numbers, addresses, and employment and income data, the indictment says. One named person and a John Doe were charged in 2019. US Attorney, S.D. Indiana
One case with no charges. Two with charges that remain unproven. Across all three, no verdict.
Marriott’s figure is the company’s revised upper limit and counts some guests more than once. The Equifax and Anthem figures are from the indictments, which are allegations.