Privacy Unpacked
Menu

Weekly breach brief · this week, updated hourly

Data breaches this week (26 Oct – 1 Nov 2026)

67 data breaches so far on the tracker, 36 confirmed by the organisation or a regulator.

Breaches so far
67
Notices in CA and WA
2
Ransomware claims
99
Largest
9.0M

The largest

  1. Yumilink 9,000,000 records
  2. Joshin 6,230,000 records Japan
  3. Fore 5,700,000 accounts
  4. Change Holdings 4,454,097 customers
  5. Sony Network Communications 2,600,000 customer records Japan
  6. Rakuten Travel 2,600,000 customers Japan

Every breach this week, by country

United States 24

Japan 13

Country being checked 10

South Korea 5

United Kingdom 3

Brazil 2

Sweden 2

Denmark 1

  • 3 reported 26 October 2026 · 400,000 customers

Hong Kong SAR China 1

Netherlands 1

  • Bitonic 27 October 2026 · 3 customers

France 1

Italy 1

India 1

Germany 1

Belgium 1

Ransomware claims

Gangs named 99 organisations on their leak sites so far this week. A claim is the gang’s word, not a confirmed breach.

What regulators did

  • Reprimand · UK Information Commissioner’s Office · Staffordshire Police The decision 27 October 2026

Settlement deadlines in the next two weeks

Every week

Follow the brief: one entry a week (Atom). The 2026 report has the year so far.

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Found a mistake? Tell us and we correct it.