Weekly breach brief

Data breaches in the week of 15–21 December 2025

26 data breaches on the tracker, 26 confirmed by the organisation or a regulator.

Breaches: 26
Notices in CA and WA: 23
Ransomware claims: 209
Largest: 515,149

The largest

Web Hosting Talk 515,149 accounts
AUTOSUR 487,226 accounts France
The Botting Network 96,320 accounts
Box Elder County 81,664 people United States

Every breach this week, by country

United States 23

Aflac Incorporated 19 December 2025 · 2,055,982 Texas residents
Box Elder County 17 December 2025 · 81,664 people
News-Press & Gazette Company 17 December 2025 · 11,440 Oregon residents
Event Rental Systems 16 December 2025 · 2,792 Texas residents
People's Community Clinic 19 December 2025 · 1,788 Texas residents
Wright Titus Agency 19 December 2025 · 1,541 Texas residents
Outdoor Smart! Inc 19 December 2025 · 1,363 Texas residents
Parexel International, LLC (“Parexel”) 17 December 2025 · 1,203 Texas residents
LKQ Corporation 15 December 2025 · 1,119 Texas residents
Baker University 19 December 2025 · 1,064 Texas residents
TorHoerman Law, LLC 15 December 2025 · 710 Texas residents
Eckerd Youth Alternatives Inc. dba Eckerd Connects 19 December 2025 · 541 Texas residents
Albertsons Companies, Inc. (Safeway, Haggen) 18 December 2025 · 515 Washington residents
Drivestream, Inc. 19 December 2025 · 507 Texas residents
Fieldtex Products Inc. 17 December 2025 · 325 Texas residents
Adamson Ahdoot LLP 19 December 2025
Conduent Business Services, LLC 18 December 2025
Conifer Value-Based Care, LLC 18 December 2025
McIntosh Laboratory, Inc. 17 December 2025
Lonich Patton Ehrlich Policastri 17 December 2025
Coupang, Inc. 16 December 2025
Friends of Family Health Center 16 December 2025
Fullsteam Software Holdings LLC d/b/a Event Rental Systems 15 December 2025

Country being checked 2

Web Hosting Talk 17 December 2025 · 515,149 accounts
The Botting Network 18 December 2025 · 96,320 accounts

France 1

AUTOSUR 18 December 2025 · 487,226 accounts

Ransomware claims

Gangs named 209 organisations on their leak sites this week, against 191 the week before. A claim is the gang’s word, not a confirmed breach.

Qilin 39 claims
Sinobi 31 claims
SafePay 23 claims
Akira 13 claims
INC Ransom 12 claims
Devman 12 claims

What regulators did

Reprimand · UK Information Commissioner’s Office · Staines Health Group The decision 16 December 2025

Every week

26 Oct – 1 Nov 2026 67 data breaches so far
19–25 October 2026 80 data breaches
12–18 October 2026 54 data breaches
5–11 October 2026 48 data breaches
28 Sept – 4 Oct 2026 68 data breaches
21–27 September 2026 67 data breaches
14–20 September 2026 71 data breaches
7–13 September 2026 46 data breaches
31 Aug – 6 Sept 2026 61 data breaches
24–30 August 2026 59 data breaches
17–23 August 2026 56 data breaches
10–16 August 2026 67 data breaches
3–9 August 2026 69 data breaches
27 Jul – 2 Aug 2026 60 data breaches
20–26 July 2026 39 data breaches
13–19 July 2026 50 data breaches
6–12 July 2026 49 data breaches
29 Jun – 5 Jul 2026 49 data breaches
22–28 June 2026 56 data breaches
15–21 June 2026 40 data breaches
8–14 June 2026 49 data breaches
1–7 June 2026 57 data breaches
25–31 May 2026 54 data breaches
18–24 May 2026 50 data breaches
11–17 May 2026 61 data breaches
4–10 May 2026 53 data breaches
27 Apr – 3 May 2026 48 data breaches
20–26 April 2026 41 data breaches
13–19 April 2026 51 data breaches
6–12 April 2026 38 data breaches
30 Mar – 5 Apr 2026 44 data breaches
23–29 March 2026 61 data breaches
16–22 March 2026 46 data breaches
9–15 March 2026 51 data breaches
2–8 March 2026 41 data breaches
23 Feb – 1 Mar 2026 50 data breaches
16–22 February 2026 45 data breaches
9–15 February 2026 50 data breaches
2–8 February 2026 46 data breaches
26 Jan – 1 Feb 2026 48 data breaches
19–25 January 2026 24 data breaches
12–18 January 2026 47 data breaches
5–11 January 2026 48 data breaches
29 Dec – 4 Jan 2026 30 data breaches
22–28 December 2025 24 data breaches
15–21 December 2025 26 data breaches
8–14 December 2025 28 data breaches
1–7 December 2025 20 data breaches
24–30 November 2025 12 data breaches
17–23 November 2025 32 data breaches
10–16 November 2025 24 data breaches
3–9 November 2025 24 data breaches
27 Oct – 2 Nov 2025 14 data breaches
20–26 October 2025 11 data breaches
13–19 October 2025 13 data breaches
6–12 October 2025 13 data breaches
29 Sept – 5 Oct 2025 16 data breaches
22–28 September 2025 14 data breaches
15–21 September 2025 18 data breaches
8–14 September 2025 18 data breaches
1–7 September 2025 9 data breaches
25–31 August 2025 18 data breaches
18–24 August 2025 14 data breaches
11–17 August 2025 11 data breaches
4–10 August 2025 11 data breaches
28 Jul – 3 Aug 2025 17 data breaches
21–27 July 2025 16 data breaches
14–20 July 2025 24 data breaches
7–13 July 2025 15 data breaches
30 Jun – 6 Jul 2025 14 data breaches
23–29 June 2025 21 data breaches
16–22 June 2025 9 data breaches
9–15 June 2025 15 data breaches
2–8 June 2025 15 data breaches
26 May – 1 Jun 2025 5 data breaches
19–25 May 2025 19 data breaches
12–18 May 2025 15 data breaches
5–11 May 2025 20 data breaches
28 Apr – 4 May 2025 15 data breaches
21–27 April 2025 15 data breaches
14–20 April 2025 10 data breaches
7–13 April 2025 29 data breaches
31 Mar – 6 Apr 2025 19 data breaches
24–30 March 2025 17 data breaches
17–23 March 2025 19 data breaches
10–16 March 2025 25 data breaches
3–9 March 2025 22 data breaches
24 Feb – 2 Mar 2025 61 data breaches
17–23 February 2025 11 data breaches
10–16 February 2025 14 data breaches
3–9 February 2025 15 data breaches
27 Jan – 2 Feb 2025 20 data breaches
20–26 January 2025 11 data breaches
13–19 January 2025 16 data breaches
6–12 January 2025 17 data breaches
30 Dec – 5 Jan 2025 7 data breaches
23–29 December 2024 9 data breaches
16–22 December 2024 23 data breaches
9–15 December 2024 18 data breaches
2–8 December 2024 12 data breaches
25 Nov – 1 Dec 2024 7 data breaches
18–24 November 2024 14 data breaches
11–17 November 2024 18 data breaches
4–10 November 2024 16 data breaches
28 Oct – 3 Nov 2024 13 data breaches
21–27 October 2024 14 data breaches
14–20 October 2024 13 data breaches
7–13 October 2024 22 data breaches
30 Sept – 6 Oct 2024 16 data breaches
23–29 September 2024 11 data breaches
16–22 September 2024 15 data breaches
9–15 September 2024 12 data breaches
2–8 September 2024 15 data breaches
26 Aug – 1 Sept 2024 22 data breaches
19–25 August 2024 16 data breaches
12–18 August 2024 14 data breaches
5–11 August 2024 17 data breaches
29 Jul – 4 Aug 2024 15 data breaches
22–28 July 2024 15 data breaches
15–21 July 2024 18 data breaches
8–14 July 2024 13 data breaches
1–7 July 2024 10 data breaches
24–30 June 2024 17 data breaches
17–23 June 2024 14 data breaches
10–16 June 2024 16 data breaches
3–9 June 2024 19 data breaches
27 May – 2 Jun 2024 20 data breaches
20–26 May 2024 26 data breaches
13–19 May 2024 12 data breaches
6–12 May 2024 17 data breaches
29 Apr – 5 May 2024 20 data breaches
22–28 April 2024 14 data breaches
15–21 April 2024 19 data breaches
8–14 April 2024 14 data breaches
1–7 April 2024 19 data breaches
25–31 March 2024 24 data breaches
18–24 March 2024 31 data breaches
11–17 March 2024 14 data breaches
4–10 March 2024 14 data breaches
26 Feb – 3 Mar 2024 28 data breaches
19–25 February 2024 15 data breaches
12–18 February 2024 12 data breaches
5–11 February 2024 17 data breaches
29 Jan – 4 Feb 2024 17 data breaches
22–28 January 2024 14 data breaches
15–21 January 2024 11 data breaches
8–14 January 2024 21 data breaches
1–7 January 2024 13 data breaches
25–31 December 2023 12 data breaches
18–24 December 2023 32 data breaches
11–17 December 2023 22 data breaches
4–10 December 2023 25 data breaches
27 Nov – 3 Dec 2023 17 data breaches
20–26 November 2023 19 data breaches
13–19 November 2023 14 data breaches
6–12 November 2023 13 data breaches
30 Oct – 5 Nov 2023 17 data breaches
23–29 October 2023 13 data breaches
16–22 October 2023 15 data breaches
9–15 October 2023 15 data breaches
2–8 October 2023 19 data breaches
25 Sept – 1 Oct 2023 9 data breaches
18–24 September 2023 21 data breaches
11–17 September 2023 14 data breaches
4–10 September 2023 14 data breaches
28 Aug – 3 Sept 2023 27 data breaches
21–27 August 2023 23 data breaches
14–20 August 2023 17 data breaches
7–13 August 2023 24 data breaches
31 Jul – 6 Aug 2023 20 data breaches
24–30 July 2023 38 data breaches
17–23 July 2023 25 data breaches
10–16 July 2023 22 data breaches
3–9 July 2023 10 data breaches
26 Jun – 2 Jul 2023 23 data breaches
19–25 June 2023 11 data breaches
12–18 June 2023 16 data breaches
5–11 June 2023 11 data breaches
29 May – 4 Jun 2023 9 data breaches
22–28 May 2023 18 data breaches
15–21 May 2023 15 data breaches
8–14 May 2023 14 data breaches
1–7 May 2023 9 data breaches
24–30 April 2023 17 data breaches
17–23 April 2023 11 data breaches
10–16 April 2023 17 data breaches
3–9 April 2023 12 data breaches
27 Mar – 2 Apr 2023 18 data breaches
20–26 March 2023 13 data breaches
13–19 March 2023 14 data breaches
6–12 March 2023 17 data breaches
27 Feb – 5 Mar 2023 21 data breaches
20–26 February 2023 7 data breaches
13–19 February 2023 15 data breaches
6–12 February 2023 9 data breaches
30 Jan – 5 Feb 2023 15 data breaches
23–29 January 2023 12 data breaches
16–22 January 2023 14 data breaches
9–15 January 2023 10 data breaches
2–8 January 2023 8 data breaches
26 Dec – 1 Jan 2023 2 data breaches

Follow the brief: one entry a week (Atom). The 2026 report has the year so far.

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Found a mistake? Tell us and we correct it.