Do I Have to Report a Data Breach to the FBI?

No. The FBI’s Internet Crime Complaint Center (IC3) strongly encourages victims to file a complaint, but doing so is voluntary, not legally required for most businesses.

That said, separate obligations can still apply, most commonly your state’s data breach notification law, which may require you to notify affected individuals or a state attorney general regardless of whether you report to the FBI. See Working With Law Enforcement After a Cyber Incident for the full picture.