Privacy UnpackedOpen data
The breach tracker’s data
765 breach records since 23 July 2026 · 528 companies · updated every hour
Everything on the tracker is free to reuse under CC BY 4.0: journalists, researchers, students and companies may copy, chart and republish it. Please credit “Privacy Unpacked data breach tracker” with a link to privacyunpacked.com/breaches/.
Downloads
- breaches.csv every record, one row each, for spreadsheets
- breaches.json every record with its sources, origin and what changed
- /breaches.json the last 90 days, as the map uses them
- /breaches-stats.json the trend statistics from the official registers since 2012
- /breaches/feed.xml new breaches as an Atom feed, and one per country
What a record is
One breach at one organisation. Reports about the same company within 45 days are one record with several sources. Each record has the organisation, where it is based, the date it was first reported, when the breach began (where a source says), the number of people or accounts affected with its unit, what was exposed, how it happened (only where a source says, with the source’s own words), every source, and a log of what changed.
How sure it is
- confirmed: the organisation or an authority confirmed it, including every notice filed with a regulator.
- reported: reported in the news, not yet confirmed.
- claimed: only the attackers (or a researcher) say so. A ransomware gang naming a victim on its leak site is not proof that personal data was stolen. Claims are in the downloads, marked, but never shown as facts.
Numbers are as reported: “Washington residents” is the count one state was told, so the real total can be higher; “accounts” are email addresses in a breached database.
Where it comes from
Official breach notices (the Attorneys General of California, Washington, Vermont, Texas and Iowa, Oregon’s Department of Justice, Wisconsin’s consumer protection department, the US Department of Health and Human Services, and companies’ cybersecurity filings with the US Securities and Exchange Commission), Have I Been Pwned (its breach list is CC BY 4.0), ransomware gangs’ leak-site claims as collected by ransomware.live, and about 70 news feeds and news searches in more than 15 languages. Every fact taken from a news article is checked word for word against the article.
Found a mistake? Tell us and we correct it.