Privacy Unpacked

Weekly breach brief

Data breaches in the week of 5–11 January 2026

48 data breaches on the tracker, 48 confirmed by the organisation or a regulator.

Breaches
48
Notices in CA and WA
16
Ransomware claims
150
Largest
6.2M

The largest

  1. Instagram 6,215,150 accounts
  2. BreachForums (2025) 672,247 accounts
  3. Gulshan Management Services, Inc. 377,082 people United States
  4. Avosina Healthcare Solutions 42,261 people United States
  5. Clackamas Community College 33,381 people United States
  6. Central Ozarks Medical Center 11,818 people United States

Every breach this week, by country

United States 46

Country being checked 2

Ransomware claims

Gangs named 150 organisations on their leak sites this week, against 101 the week before. A claim is the gang’s word, not a confirmed breach.

Every week

Follow the brief: one entry a week (Atom). The 2026 report has the year so far.

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Found a mistake? Tell us and we correct it.