Live disclosure tracker · updated continuously

2026 Data Breaches Year-to-Date

2026 continues the year-over-year growth trend in confirmed disclosures. The list below updates as new breaches are reported by Verizon DBIR partners and major security news outlets.

98B+

Records Exposed

3094

Incidents

94+

Countries

+104%

Breach Velocity YoY

View Live Map → Run Free Exposure Scan RSS

Browse by sector

All breaches Healthcare Finance Government Technology Retail Education Legal

Browse by year

2024 2025 2026 2026 Index

2026 Data Breaches Year-to-Date (3094 indexed)

critical · other · Jul 9, 2026

Global Credential Dump

24B credentials exposed via infostealer logs

View incident → Indexed 1 month, 3 weeks ago

critical · government · Jul 9, 2026

Tchap French Government

73K government accounts and 643K messages stolen

View incident → Indexed 1 month, 3 weeks ago

critical · government · Jul 9, 2026

Conduent Government Services

62.2M SSNs and health records exposed

View incident → Indexed 1 month, 3 weeks ago

high · finance · Jul 9, 2026

NAIC Insurance Commissioners

Regulatory filings and credentials stolen by ShinyHunters

View incident → Indexed 1 month, 3 weeks ago

high · other · Jul 9, 2026

Kubota North America

SSNs and bank data stolen in month-long intrusion

View incident → Indexed 1 month, 3 weeks ago

high · healthcare · Jul 9, 2026

Lake Region Healthcare

SSNs, biometrics and medical records confirmed stolen

View incident → Indexed 1 month, 3 weeks ago

medium · other · Jul 9, 2026

A new data-extortion group called Helix is using identity-focused tactics such as voice

A new data-extortion group called Helix is using identity-focused tactics such as voice phishing (vishing), device code phishing, and multi-factor authentication (MFA) abuse to steal data from SharePoint environments. [.

View incident → Original disclosure Indexed 1 month, 3 weeks ago

critical · other · Jul 9, 2026

Hackers exploited a zero-day vulnerability in a third-party system to access a KDDI

Hackers exploited a zero-day vulnerability in a third-party system to access a KDDI email system for ISPs. The post 12 Million Impacted by Data Breach at Japanese Telco KDDI appeared first on SecurityWeek.

View incident → Original disclosure Indexed 1 month, 3 weeks ago

critical · other · Jul 9, 2026

Nissan Americas

Employee SSNs, banking, tax data stolen

View incident → Indexed 1 month, 3 weeks ago

critical · healthcare · Jul 9, 2026

NYC Health Hospitals

1.8M records with SSNs and biometrics stolen

View incident → Indexed 1 month, 3 weeks ago

critical · tech · Jul 9, 2026

June 2026 Stealer Logs

56M unique emails and 124M passwords indexed on HIBP

View incident → Indexed 1 month, 3 weeks ago

medium · legal · Jul 9, 2026

Chisholm Persson Ball

Akira ransomware hit US law firm

View incident → Indexed 1 month, 3 weeks ago

critical · government · Jul 9, 2026

Illinois Dept Human Services

Hundreds of thousands of health records exposed publicly

View incident → Indexed 1 month, 3 weeks ago

critical · government · Jul 9, 2026

HSIN platform

HSIN platform breached, national security data exposed

View incident → Indexed 1 month, 3 weeks ago

high · government · Jul 9, 2026

Texas Parks and Wildlife

3M hunting and fishing license records exposed

View incident → Indexed 1 month, 3 weeks ago

high · retail · Jul 9, 2026

Harrods

430K customer records stolen by unauthorized third party

View incident → Indexed 1 month, 3 weeks ago

high · healthcare · Jul 9, 2026

One Medical

Archived senior care patient records accessed

View incident → Indexed 1 month, 3 weeks ago

high · government · Jul 9, 2026

Canada House of Commons

Employee PII stolen via SharePoint zero-day

View incident → Indexed 1 month, 3 weeks ago

critical · government · Jul 9, 2026

World Cup security intel

World Cup security intel exposed via HSIN platform

View incident → Indexed 1 month, 3 weeks ago

critical · education · Jul 9, 2026

Instructure Canvas

30M student and staff records stolen

View incident → Indexed 1 month, 3 weeks ago

critical · finance · Jul 9, 2026

NAIC Insurance Regulators

3.1TB stolen via Oracle PeopleSoft zero-day

View incident → Indexed 1 month, 3 weeks ago

critical · other · Jul 9, 2026

ADT Security

5.5M unique emails and PII leaked after breach

View incident → Indexed 1 month, 3 weeks ago

critical · other · Jul 9, 2026

Nissan Motor

Employee SSNs and bank data stolen via Oracle zero-day

View incident → Indexed 1 month, 3 weeks ago

critical · other · Jul 9, 2026

Global Infostealer Credential Dump

24B stolen credentials exposed online

View incident → Indexed 1 month, 3 weeks ago