North American data breaches in 2026 have exposed tens of millions of records across healthcare, financial services, and government sectors. Recent disclosures reveal systematic vulnerabilities in third-party vendor management and credential-based attacks.
Attackers spent three months inside Conduent's environment exfiltrating 8TB of healthcare and benefits data from Medicaid systems, SNAP programs, and health insurers.
What it means: One of the largest healthcare-related breaches on record affects millions of benefit recipients, creating identity theft and fraud exposure.
Attackers obtained customer contact data and published a 760MB archive containing names, emails, phone numbers, and addresses after ransom demands were refused.
What it means: Customer personal information is now available for phishing campaigns and identity fraud targeting Panera's 5 million affected accounts.
Ransomware gang breached the Cancer Center's Epidemiology Division in August 2025, stealing names, Social Security numbers, driver's license data, and voter registration information.
What it means: Compromised sensitive health and identity data puts patients at severe risk for identity theft and targeted fraud.
Attackers breached customer contact systems and downloaded names, addresses, emails, mobile numbers, dates of birth, and identification details from 6.2 million customers.
What it means: Customers face targeted phishing, SIM swap attacks, and account takeovers using verified identity and contact information.
Hackers exploited a MOVEit file transfer vulnerability to steal 4.1 million Colorado patient records including protected health information.
What it means: Healthcare providers relying on vulnerable MOVEit systems face ongoing exposure until patches are applied enterprise-wide.
Social engineering attack tricked an employee into providing access, allowing attackers to download user account data including names, dates of birth, addresses, and phone numbers.
What it means: Nearly one million user accounts are exposed to identity theft and phishing campaigns targeting verified personal information.