Privacy Unpacked
Menu

Weekly breach brief

Data breaches in the week of 17–23 November 2025

32 data breaches on the tracker, 32 confirmed by the organisation or a regulator.

Breaches
32
Notices in CA and WA
19
Ransomware claims
219
Largest
1.8M

The largest

  1. ADDA 1,829,314 accounts
  2. Beckett Collectibles 1,041,238 accounts
  3. International Kiteboarding Organization 340,349 accounts
  4. Vultr 187,872 accounts
  5. CodeStepByStep 103,077 accounts
  6. Eurofiber 10,003 accounts

Every breach this week, by country

United States 26

Country being checked 6

Ransomware claims

Gangs named 219 organisations on their leak sites this week, against 163 the week before. A claim is the gang’s word, not a confirmed breach.

What regulators did

  • Monetary penaltie · UK Information Commissioner’s Office · LastPass UK Ltd The decision 20 November 2025
Every week

Follow the brief: one entry a week (Atom). The 2026 report has the year so far.

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Found a mistake? Tell us and we correct it.