Six major breaches have struck North American organizations across healthcare, education, and telecom sectors in 2026. Combined impact exceeds 65 million records, with credential theft and ransomware as primary attack vectors.
Medicaid claims processor experienced 83-day unauthorized network access, exposing names, Social Security numbers, health insurance details, and medical records.
What it means: Third-largest U.S. healthcare breach on record; affected individuals across 30+ states face long-term identity theft risk.
Third-party vendor compromise allowed attackers to copy personal, medical, financial, and biometric information from hospital systems.
What it means: One of 2026's largest healthcare breaches; sensitive patient data including SSNs and diagnoses exposed across NYC hospital system.
ShinyHunters exploited free-for-teacher program and defaced portals at 330 institutions including Harvard and Princeton during exam periods.
What it means: Largest education-sector breach on record; Canvas serves 41% of North American higher education institutions.
Extortion group stole 42M customer records and published data covering support interactions and billing information.
What it means: Major telecom breach affecting millions of cable and internet customers; data published on leak sites.
Zero-day exploit in third-party email system led to theft of names, addresses, emails, and Social Security numbers from 3,931 state-level registrants.
What it means: Energy sector employee data exposed; company offering 24-month credit monitoring with October 31 enrollment deadline.
Largest North American credit check provider compromised via third-party API; hackers accessed customer information for automotive businesses.
What it means: Major supply chain risk for auto dealers and finance companies; 5.8 million individuals affected across North America.