Hacken’s Q1 2026 report finds $464.5 million lost across 43 incidents, with phishing, legacy code bugs and key compromises driving losses as regulators tighten security demands.