Live tracker · Updated Sep 12, 2026

The Worst Breaches of 2026 (So Far)

The year's largest confirmed data breaches, ranked by records exposed. This list updates itself automatically as new disclosures go public.

Ranked by records exposed

2
critical · healthcare · Sep 2026

ShinyHunters

6.4Mrecords exposed

Connor Jones reports: McKesson’s cyberattack last month affected roughly 6.4 million individuals, according to Have I Been Pwned (HIBP). The breach notification service added data leaked by serial extortionists Shi

4
critical · other · Sep 2026

AdaptHealth

4.1Mrecords exposed

Healthcare company AdaptHealth has confirmed that data of 4.1 million people was exposed in a cyberattack discovered in July that was attributed to the ShinyHunters threat group. [...]

6
high · dental · Jan 2026

Tampa Bay Dental Implants & Periodontics

6Krecords exposed

Unauthorized access detected January 19, 2026. Ransomware encrypted files on a legacy server containing a backup of electronic medical records. Patient data exposed: names, contact information, birth dates, treatment notes, clinical histories. SSNs exposed for a limited number of individuals.

View every 2026 breach we've indexed →

Is your organization exposed?

Most of the incidents above began with credentials and infrastructure that were exposed long before the breach. Run a free exposure assessment to see what an attacker can already find on your organization.

Check your exposure free →