Six major data breaches have affected millions of North Americans in 2026, spanning identity verification, healthcare, education, and automotive insurance. Combined, these incidents have exposed approximately 300+ million records, with critical implications for credential theft and healthcare fraud.
Critical 153M+ records Sep 4, 2026
IDScan.net identity database leaked, millions of driver's licenses exposed
IDScan.net (ID verification service)
Unauthorized third-party access exposed driver's license numbers and government-issued ID details from Canada and the US on IDScan.net's cloud platform.
What it means: Largest exposure of government-issued identity documents in North America; creates widespread identity theft and fraud risk affecting millions in both countries.
Critical 275M records May 1, 2026
Canvas learning platform breached, 275 million students and faculty affected globally
Instructure Canvas
ShinyHunters exploited Free-for-Teacher accounts to steal 3.65 terabytes of data including student names, email addresses, ID numbers, and private messages.
What it means: Largest education sector breach on record affecting 8,809 institutions; 41 percent of US higher education institutions and seven Canadian universities confirmed compromised.
Critical 15M records May 2026
DentaQuest dental insurance breach exposes 15 million patient health records
DentaQuest
Second-largest US dental insurance company suffered cyberattack exposing health data for 15 million patients, the largest healthcare entity breach of 2026.
What it means: Unprecedented scale healthcare breach exposes patients to identity theft, medical fraud, and insurance claim manipulation.
Critical 6.9M records Jul 2026
AssuranceAmerica auto insurance breach steals 6.9 million driver's licenses
AssuranceAmerica
Hackers stole personal information and driver's license numbers from 6.9 million Americans, largest known US driver's license data breach.
What it means: Enables large-scale identity fraud, license cloning, and account takeovers across financial and government systems.
High 3.4M records Oct 2, 2025
TriZetto Provider Solutions healthcare breach affects 3.4 million patients
TriZetto Provider Solutions (Cognizant)
Unauthorized party accessed insurance eligibility verification records since November 2024; breach reported to HHS in February 2026.
What it means: Compromises health insurance information for millions; enables fraudulent claims and medical identity theft.
High 6M records Apr 2026
Carnival Corporation cruise line breach steals 6 million passenger records
Carnival Corporation
Hackers gained employee account access via social engineering and stole files with passenger names, addresses, dates of birth, and identification numbers.
What it means: Exposes travelers to identity theft, account takeovers, and fraudulent travel bookings.