LeakTrace Intelligence Desk · September 26, 2026

Weekly Breach Intelligence Briefing

Six major data breaches have affected millions of North Americans in 2026, spanning identity verification, healthcare, education, and automotive insurance. Combined, these incidents have exposed approximately 300+ million records, with critical implications for credential theft and healthcare fraud.

Critical 153M+ records Sep 4, 2026

IDScan.net identity database leaked, millions of driver's licenses exposed

IDScan.net (ID verification service)

Unauthorized third-party access exposed driver's license numbers and government-issued ID details from Canada and the US on IDScan.net's cloud platform.

What it means: Largest exposure of government-issued identity documents in North America; creates widespread identity theft and fraud risk affecting millions in both countries.

Critical 275M records May 1, 2026

Canvas learning platform breached, 275 million students and faculty affected globally

Instructure Canvas

ShinyHunters exploited Free-for-Teacher accounts to steal 3.65 terabytes of data including student names, email addresses, ID numbers, and private messages.

What it means: Largest education sector breach on record affecting 8,809 institutions; 41 percent of US higher education institutions and seven Canadian universities confirmed compromised.

Critical 15M records May 2026

DentaQuest dental insurance breach exposes 15 million patient health records

DentaQuest

Second-largest US dental insurance company suffered cyberattack exposing health data for 15 million patients, the largest healthcare entity breach of 2026.

What it means: Unprecedented scale healthcare breach exposes patients to identity theft, medical fraud, and insurance claim manipulation.

Critical 6.9M records Jul 2026

AssuranceAmerica auto insurance breach steals 6.9 million driver's licenses

AssuranceAmerica

Hackers stole personal information and driver's license numbers from 6.9 million Americans, largest known US driver's license data breach.

What it means: Enables large-scale identity fraud, license cloning, and account takeovers across financial and government systems.

High 3.4M records Oct 2, 2025

TriZetto Provider Solutions healthcare breach affects 3.4 million patients

TriZetto Provider Solutions (Cognizant)

Unauthorized party accessed insurance eligibility verification records since November 2024; breach reported to HHS in February 2026.

What it means: Compromises health insurance information for millions; enables fraudulent claims and medical identity theft.

High 6M records Apr 2026

Carnival Corporation cruise line breach steals 6 million passenger records

Carnival Corporation

Hackers gained employee account access via social engineering and stole files with passenger names, addresses, dates of birth, and identification numbers.

What it means: Exposes travelers to identity theft, account takeovers, and fraudulent travel bookings.