Privacy Unpacked
Menu

Weekly breach brief

Data breaches in the week of 19–25 January 2026

24 data breaches on the tracker, 24 confirmed by the organisation or a regulator.

Breaches
24
Notices in CA and WA
10
Ransomware claims
220
Largest
72.7M

The largest

  1. Under Armour 72,742,892 accounts
  2. Raaga 10,225,145 accounts
  3. TriZetto Provider Solutions 3,433,965 people United States
  4. 1st MidAmerica Credit Union 131,070 people United States
  5. Civil Service Employees Association Inc Local 1000 AFSCME AFL CIO 47,352 people United States
  6. Wisner Baum LLP 16,922 people United States

Every breach this week, by country

United States 22

Country being checked 2

  • Under Armour 21 January 2026 · 72,742,892 accounts
  • Raaga 19 January 2026 · 10,225,145 accounts

Ransomware claims

Gangs named 220 organisations on their leak sites this week, against 151 the week before. A claim is the gang’s word, not a confirmed breach.

Every week

Follow the brief: one entry a week (Atom). The 2026 report has the year so far.

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Found a mistake? Tell us and we correct it.