Live tracker · Updated Jul 28, 2026

The Worst Breaches of 2026 (So Far)

The year's largest confirmed data breaches, ranked by records exposed. This list updates itself automatically as new disclosures go public.

Ranked by records exposed

3
critical · finance · Mar 2026

Addi

34.5Mrecords exposed

Age groups, Credit scores, Device information, Email addresses and 9 more

5
critical · finance · Mar 2026

Paidwork

23.3Mrecords exposed

Bank account numbers, Dates of birth, Device information, Education levels and 10 more

7
critical · education · Apr 2026

McGraw Hill

13.5Mrecords exposed

Email addresses, Names, Phone numbers, Physical addresses

8
critical · retail · Feb 2026

CarGurus

12.5Mrecords exposed

Email addresses, IP addresses, Names, Phone numbers and 1 more

9
critical · healthcare · Jun 2026

Medtronic

9Mrecords exposed

9M records stolen including health and SSN data

12
high · retail · Jun 2026

Goose Creek

6.6Mrecords exposed

Email addresses, Names, Phone numbers, Physical addresses and 1 more

13
high · tech · Jan 2026

Instagram

6.2Mrecords exposed

Display names, Email addresses, Geographic locations, Phone numbers and 1 more

15
critical · other · Apr 2026

ADT

5.5Mrecords exposed

5.5M customer records stolen and leaked

18
critical · government · Jul 2026

Kim Eun-bi

4.6Mrecords exposed

Kim Eun-bi reports: The Seoul Metropolitan Government will send individual text messages to about 4.62 million citizens affected by a data breach involving membership information for Ttareungyi, the city’s public b

21
critical · legal · Jul 2026

Carrie Tait

2.9Mrecords exposed

Carrie Tait reports: A retired lawyer is suing Alberta, its Chief Electoral Officer and two organizations that support secession for their respective roles in an alleged data breach affecting 2.9 million residents in the

22
high · retail · Jun 2026

Sysco

2.7Mrecords exposed

Customer feedback, Email addresses, Employers, Job titles and 4 more

23
critical · healthcare · Jun 2026

DentaQuest

2.6Mrecords exposed

2.6M Medicaid health records leaked by ShinyHunters

View every 2026 breach we've indexed →

Is your organization exposed?

Most of the incidents above began with credentials and infrastructure that were exposed long before the breach. Run a free exposure assessment to see what an attacker can already find on your organization.

Check your exposure free →