Weekly briefing › No. 22
Weekly briefing · No. 22 · 3 Jun 2026
Six major 2026 data breaches targeted North Americans, exposing millions of personal and financial records across finance, technology, and retail sectors.
Third-party vendor compromises and credential theft emerged as the dominant attack vectors across all incidents.
This issue’s disclosures
Feb 15, 2026
Canada Goose
Credential Theft · 0.6M records
Threat actors claimed exposure of approximately 600,000 customer records related to past transactions through a third-party service.
What it means: Canadian luxury brand customers face identity theft and phishing risks from compromised transaction history.
Feb 15, 2026
HighJan 25, 2026
Canada Computers & Electronics
Financial · 1.3K records
Unauthorized attackers accessed the retail website's guest checkout system between December 2025 and January 2026, stealing payment card information.
What it means: Guest customers exposed to credit card fraud and identity theft from compromised financial data.
Jan 25, 2026
CriticalFeb 14, 2026
Figure Lending LLC
Credential Theft · 3M records
Social engineering attack compromised an employee account, granting attackers access to internal Okta systems and customer databases containing 3 million records.
What it means: US fintech customers face severe identity theft risk with exposed Social Security numbers and financial account information.
Feb 14, 2026
CriticalJan 22, 2026
Under Armour
Credential Theft · 72M records
A dataset containing 72 million user email addresses tied to a previous breach resurfaced publicly in 2026, linked to third-party credential compromise.
What it means: Massive volume of US customer emails exposes users to targeted phishing campaigns and account takeover attempts.
Jan 22, 2026
CriticalApr 20, 2026
France Titres (ANTS)
Healthcare · 11.7M records
Attackers accessed the national digital identity portal, exfiltrating names, emails, dates of birth, addresses, phone numbers, and login credentials from millions of accounts.
What it means: Citizens across Europe face severe identity fraud and account takeover risk from compromised government authentication data.
Apr 20, 2026
HighApr 02, 2026
Hallmark Cards
Credential Theft · 2.8M records
Threat actors breached Salesforce environment and exfiltrated 2.8 million customer records after Hallmark declined ransom demands.
What it means: Greeting card customers globally face phishing and identity theft from exposed names, addresses, phone numbers, and personal shopping data.
Apr 02, 2026
This issue by category
Where this issue’s disclosures sit.
The 6 disclosures in issue No. 22, by the category we filed each one under.