So, I just glanced through this¹ Wikipedia entry and quickly added up all the numbers in the yearly lists of major data breaches and came up with this number:
929 million users / customers affected by major data breaches since 2005.
There's probably at least some / a whole lot of overlap in some, but still...
Thusly, it'd be unusual if any particular individual hasn't had at least some of their identity go astray.