Data breaches in 2026

The public breach catalog records 86 breaches dated 2026, exposing about 295M accounts. 12 of them (14%) included passwords. The data type exposed most often was email addresses, found in 86 breaches.

2025 had 62 recorded breaches exposing about 2.9B accounts.

Largest breaches

  • June 2026 Stealer Logs: 2026-06-15, 56M accounts, Email addresses, Passwords
  • Addi: 2026-03-25, 35M accounts, Age groups, Credit scores, Device information, Email addresses, Government issued IDs, Income levels
  • Paidwork: 2026-03-29, 23M accounts, Bank account numbers, Dates of birth, Device information, Education levels, Email addresses, Financial transactions
  • McGraw Hill: 2026-04-10, 14M accounts, Email addresses, Names, Phone numbers, Physical addresses
  • Carhartt: 2026-08-13, 13M accounts, Email addresses, Names, Phone numbers, Physical addresses
  • CarGurus: 2026-02-14, 12M accounts, Email addresses, IP addresses, Names, Phone numbers, Physical addresses
  • Exact Sciences: 2026-07-15, 11M accounts, Dates of birth, Email addresses, Genders, Names, Personal health data, Phone numbers
  • Madison Square Garden Sports: 2026-06-05, 9.8M accounts, Customer service records, Email addresses, Names, Phone numbers, Physical addresses
  • Manchester Airports Group: 2026-08-27, 8.8M accounts, Browser user agent details, Email addresses, Geographic locations, IP addresses, Names, Phone numbers
  • Pitney Bowes: 2026-04-20, 8.2M accounts, Email addresses, Job titles, Names, Phone numbers, Physical addresses

What was exposed most often

Every breach dated 2026

  • June 2026 Stealer Logs: 2026-06-15, 56M accounts, Email addresses, Passwords
  • Addi: 2026-03-25, 35M accounts, Age groups, Credit scores, Device information, Email addresses, Government issued IDs, Income levels
  • Paidwork: 2026-03-29, 23M accounts, Bank account numbers, Dates of birth, Device information, Education levels, Email addresses, Financial transactions
  • McGraw Hill: 2026-04-10, 14M accounts, Email addresses, Names, Phone numbers, Physical addresses
  • Carhartt: 2026-08-13, 13M accounts, Email addresses, Names, Phone numbers, Physical addresses
  • CarGurus: 2026-02-14, 12M accounts, Email addresses, IP addresses, Names, Phone numbers, Physical addresses
  • Exact Sciences: 2026-07-15, 11M accounts, Dates of birth, Email addresses, Genders, Names, Personal health data, Phone numbers
  • Madison Square Garden Sports: 2026-06-05, 9.8M accounts, Customer service records, Email addresses, Names, Phone numbers, Physical addresses
  • Manchester Airports Group: 2026-08-27, 8.8M accounts, Browser user agent details, Email addresses, Geographic locations, IP addresses, Names, Phone numbers
  • Pitney Bowes: 2026-04-20, 8.2M accounts, Email addresses, Job titles, Names, Phone numbers, Physical addresses
  • Carnival: 2026-04-18, 7.5M accounts, Dates of birth, Email addresses, Genders, Geographic locations, Loyalty program details, Names
  • Goose Creek: 2026-06-09, 6.6M accounts, Email addresses, Names, Phone numbers, Physical addresses, Purchases
  • McKesson: 2026-08-21, 6.4M accounts, Dates of birth, Email addresses, Employers, Genders, Names, Personal health data
  • Instagram: 2026-01-07, 6.2M accounts, Display names, Email addresses, Geographic locations, Phone numbers, Usernames
  • Odido: 2026-02-12, 6.1M accounts, Bank account numbers, Customer service records, Dates of birth, Driver's licenses, Email addresses, Genders
  • ADT: 2026-04-20, 5.5M accounts, Dates of birth, Email addresses, Names, Partial government issued IDs, Phone numbers, Physical addresses
  • ZenBusiness: 2026-03-27, 5.1M accounts, Email addresses, Names, Phone numbers
  • Panera Bread: 2026-01-07, 5.1M accounts, Email addresses, Names, Phone numbers, Physical addresses
  • Charter: 2026-05-23, 4.9M accounts, Email addresses, Job titles, Names, Phone numbers, Physical addresses
  • Chess.com (2026): 2026-08-03, 4.7M accounts, Email addresses, Geographic locations, Names, Usernames
  • Operation Endgame 4.0: 2026-06-18, 4.3M accounts, Email addresses, Passwords
  • Sysco: 2026-06-15, 2.7M accounts, Customer feedback, Email addresses, Employers, Job titles, Names, Phone numbers
  • DentaQuest: 2026-05-23, 2.6M accounts, Dates of birth, Email addresses, Genders, Government issued IDs, Health insurance information, Names
  • Moody Bible Institute: 2026-06-15, 2.3M accounts, Dates of birth, Email addresses, Genders, Marital statuses, Names, Phone numbers
  • Amtrak: 2026-04-03, 2.1M accounts, Email addresses, Names, Physical addresses, Support tickets
  • Oz Hair and Beauty: 2026-08-15, 2.0M accounts, Email addresses, Geographic locations, Names, Phone numbers, Purchases
  • Marcus & Millichap: 2026-04-12, 1.8M accounts, Email addresses, Employers, Job titles, Names, Phone numbers, Physical addresses
  • Hallmark: 2026-03-31, 1.7M accounts, Email addresses, Names, Phone numbers, Physical addresses, Support tickets
  • RingCentral: 2026-07-27, 1.6M accounts, Email addresses, Names, Phone numbers, Physical addresses
  • Betterment: 2026-01-09, 1.4M accounts, Dates of birth, Device information, Email addresses, Employers, Geographic locations, Job titles
  • Udemy: 2026-04-24, 1.4M accounts, Email addresses, Employers, Job titles, Names, Payment methods, Phone numbers
  • Baydöner: 2026-03-08, 1.3M accounts, Dates of birth, Email addresses, Genders, Geographic locations, Government issued IDs, Names
  • Questel: 2026-08-01, 1.2M accounts, Email addresses, Employers, Job titles, Names, Phone numbers, Physical addresses
  • Crunchyroll: 2026-03-12, 1.2M accounts, Email addresses
  • KomikoAI: 2026-02-25, 1.1M accounts, AI prompts, Email addresses, Forum posts, Names
  • Figure: 2026-01-28, 967K accounts, Dates of birth, Email addresses, Names, Phone numbers, Physical addresses
  • Aura: 2026-03-06, 903K accounts, Customer service records, Email addresses, IP addresses, Names, Phone numbers, Physical addresses
  • SplitVPN: 2026-07-21, 865K accounts, Device information, Email addresses, Geographic locations, IP addresses, Partial credit card data
  • Houston City College: 2026-06-16, 832K accounts, Academic records, Citizenship statuses, Dates of birth, Email addresses, Genders, Names
  • Fluke: 2026-07-01, 821K accounts, Email addresses, Employers, Job titles, Names, Physical addresses, Support tickets
  • Glendale Community College: 2026-06-15, 794K accounts, Academic records, Dates of birth, Email addresses, Genders, Government issued IDs, Names
  • Brinks Home: 2026-07-13, 732K accounts, Dates of birth, Email addresses, Names, Partial credit card data, Phone numbers, Physical addresses
  • Provecho: 2026-01-30, 713K accounts, Email addresses, Usernames
  • Abrigo: 2026-04-14, 711K accounts, Email addresses, Employers, Job titles, Names, Phone numbers, Physical addresses
  • Golf Canada: 2026-05-14, 569K accounts, Dates of birth, Email addresses, Genders, Geographic locations, Names, Usernames
  • Ameriprise: 2026-03-02, 503K accounts, Email addresses, Employers, Financial transactions, Job titles, Names, Phone numbers
  • Lovora: 2026-02-25, 496K accounts, Display names, Email addresses, Profile photos
  • CTT: 2026-04-26, 468K accounts, Email addresses, Names, Phone numbers
  • University of Nottingham: 2026-06-09, 455K accounts, Academic records, Citizenship statuses, Dates of birth, Disabilities, Email addresses, Ethnicities
  • Woflow: 2026-03-04, 448K accounts, Email addresses, Names, Phone numbers, Physical addresses
  • CarMax: 2026-01-24, 431K accounts, Email addresses, Names, Phone numbers, Physical addresses
  • Medela: 2026-09-07, 424K accounts, Email addresses, Employers, Job titles, Names, Phone numbers, Physical addresses
  • BCD Travel: 2026-05-29, 396K accounts, Email addresses, Employers, Job titles, Names, Phone numbers, Physical addresses
  • CyrusOne: 2026-08-05, 373K accounts, Email addresses, Employers, Job titles, Names, Phone numbers, Physical addresses
  • JCPenney: 2026-06-12, 368K accounts, Dates of birth, Email addresses, Government issued IDs, Job titles, Names, Phone numbers
  • BreachForums Version 5: 2026-03-26, 340K accounts, Email addresses, Passwords, Usernames
  • Cushman & Wakefield: 2026-05-05, 310K accounts, Email addresses, Job titles, Names, Phone numbers, Physical addresses, Salutations
  • Berkadia: 2026-03-19, 305K accounts, Email addresses, Employers, Names, Phone numbers, Physical addresses
  • Sound Radix: 2026-03-25, 293K accounts, Email addresses, Names, Passwords
  • SongTrivia2: 2026-04-02, 292K accounts, Auth tokens, Avatars, Email addresses, Names, Passwords, Usernames

Frequently asked questions

How many data breaches were there in 2026?

The public breach catalog records 86 breaches dated 2026, exposing about 295M accounts. The number keeps rising for recent years because breaches are often disclosed long after they happen.

What was the biggest data breach of 2026?

June 2026 Stealer Logs, with about 56M accounts, is the largest breach dated 2026 in this directory.

Were passwords leaked in 2026 breaches?

12 of the 86 breaches dated 2026 (14%) included passwords. If you had an account with any of them, change that password and anywhere you reused it.

Breach data sourced from Have I Been Pwned, used under CC BY 4.0. Additional breach metadata provided by XposedOrNot. DataExposed is an independent service and is not affiliated with or endorsed by either.