Live tracker · Updated Jun 7, 2026

The Worst Breaches of 2026 (So Far)

The year's largest confirmed data breaches, ranked by records exposed. This list updates itself automatically as new disclosures go public.

Ranked by records exposed

2
medium · finance · Apr 2026

EngageLab SDK flaw opens door

50Mrecords exposed

A flaw in EngageLab SDK exposed up to 50M Android users, including 30M crypto wallets, letting apps bypass security and access private data. Microsoft researchers found a critical flaw in EngageSDK that lets apps bypass

19
critical · other · Apr 2026

Home security giant ADT data

5.5Mrecords exposed

The ShinyHunters extortion group stole the personal information of 5.5 million individuals after breaching the systems of home security giant ADT earlier this month, according to data breach notification service Have I B

View every 2026 breach we've indexed →

Is your organization exposed?

Most of the incidents above began with credentials and infrastructure that were exposed long before the breach. Run a free exposure assessment to see what an attacker can already find on your organization.

Check your exposure free →