SECURELYN
Free ScanFree consultation

Latest data breaches

Data breaches that happened in 2026: which organisations had customer details exposed, how many people were affected and what to do about it. From the breaches that Have I Been Pwned has checked. Period: January to October 2026.

Breach data from Have I Been Pwned (haveibeenpwned.com), used under CC BY 4.0.

2026 in numbers

  • 83

    Breaches that happened in 2026

  • 218 million

    Accounts exposed in 2026 (one person can appear many times)

  • 12%

    Of 2026 breaches included passwords

  • Email addresses

    Most common kind of data exposed in 2026 (83 breaches)

Period: January to October 2026. List current as at 18 October 2026. Source: Have I Been Pwned.

Breaches in 2026 by the month they happenedBar chart of breach counts by month, January to October 2026. The same numbers are in the table that follows. 9Jan5Feb16Mar19Apr8May11Jun4Jul10AugSep1Oct
Breaches in 2026 by the month they happened
Breaches in 2026 by the month they happened: data
MonthBreaches
January 20269
February 20265
March 202616
April 202619
May 20268
June 202611
July 20264
August 202610
September 20260
October 20261

Most common kinds of data exposed in 2026

Most common kinds of data exposed in 2026
Kind of dataBreachesShare of breaches
Email addresses83100%
Names7186%
Phone numbers6072%
Physical addresses5465%
Job titles2227%
Dates of birth1923%
Employers1720%
Usernames1619%
Genders1316%
Purchases1316%

Largest breaches of 2026

  1. 1. Addi 34,532,941 accounts. Breach: 25 March 2026.
  2. 2. Paidwork 23,272,765 accounts. Breach: 29 March 2026.
  3. 3. McGraw Hill 13,500,136 accounts. Breach: 10 April 2026.
  4. 4. Carhartt 12,933,413 accounts. Breach: 13 August 2026.
  5. 5. CarGurus 12,461,887 accounts. Breach: 14 February 2026.
  6. 6. Madison Square Garden Sports 9,796,738 accounts. Breach: 5 June 2026.
  7. 7. Manchester Airports Group 8,849,657 accounts. Breach: 27 August 2026.
  8. 8. Pitney Bowes 8,243,989 accounts. Breach: 20 April 2026.

Latest confirmed breaches of 2026

Breaches that happened in 2026, newest additions to the Have I Been Pwned list first.

More recent breaches

More recent breaches, newest additions first
OrganisationBreach dateAccountsTop kinds of data
Chess.com (2026)3 August 20264,653,212Email addresses, Geographic locations, Names
Manchester Airports Group27 August 20268,849,657Browser user agent details, Email addresses, Geographic locations
Questel1 August 20261,226,209Email addresses, Employers, Job titles
Carhartt13 August 202612,933,413Email addresses, Names, Phone numbers
Golf Canada14 May 2026568,972Dates of birth, Email addresses, Genders
Fanlore6 August 2026144,520Email addresses, Names, Passwords
Oz Hair and Beauty15 August 20261,988,331Email addresses, Geographic locations, Names
RingCentral27 July 20261,596,490Email addresses, Names, Phone numbers
Alcon1 August 2026218,395Email addresses, Names, Phone numbers
Brinks Home13 July 2026732,162Dates of birth, Email addresses, Names
Inter-Con Security18 June 2026276,114Email addresses, Employers, Job titles
SplitVPN21 July 2026865,336Device information, Email addresses, Geographic locations
Houston City College16 June 2026831,642Academic records, Citizenship statuses, Dates of birth
Paidwork29 March 202623,272,765Bank account numbers, Dates of birth, Device information
Fluke1 July 2026821,100Email addresses, Employers, Job titles
Goose Creek9 June 20266,574,121Email addresses, Names, Phone numbers
Glendale Community College15 June 2026793,925Academic records, Dates of birth, Email addresses
Moody Bible Institute15 June 20262,303,416Dates of birth, Email addresses, Genders
Sysco15 June 20262,691,852Customer feedback, Email addresses, Employers
American Tower12 June 2026216,601Email addresses, Job titles, Names
Madison Square Garden Sports5 June 20269,796,738Customer service records, Email addresses, Names
JCPenney12 June 2026368,418Dates of birth, Email addresses, Government issued IDs
CFGI6 March 2026248,235Email addresses, Employers, Job titles
Ralph Lauren11 June 2026139,903Age groups, Email addresses, Genders

What to do after a breach is on the breach statistics and what to do page. Unfamiliar words are in the glossary.

Claimed by ransomware groups

The latest organisations that criminal groups say they attacked this year. These are unverified claims, not confirmed breaches. See all claims and the trends.

Latest ransomware claims
OrganisationClaimed byDate claimed
********rta.chcloak18 October 2026
All Business Technologies (Fox Hill bookkeeping and tax practice)N0n18 October 2026
BRUTRA Logistekqilin18 October 2026
Company #89N0n18 October 2026
Company #90N0n18 October 2026
Company #91N0n18 October 2026
ECO USAN0n18 October 2026
Llano Independent School Districtqilin18 October 2026
Luzco Iluminationemperador18 October 2026
Mastelli S.r.l.qilin18 October 2026

Check your own exposure