Privacy Unpacked
Menu

Weekly breach brief

Data breaches in the week of 2–8 February 2026

46 data breaches on the tracker, 46 confirmed by the organisation or a regulator.

Breaches
46
Notices in CA and WA
16
Ransomware claims
229
Largest
663,121

The largest

  1. Substack 663,121 accounts
  2. Compensation Rating & Inspection Bureau 62,117 people United States
  3. Gravity Payments Inc 22,278 people United States
  4. UA Sprinkler Fitters Local 669 Joint Apprenticeship and Training Committee 20,063 people United States
  5. Gain Federal Credit Union 10,411 people United States
  6. Powerhouse Retail Services 7,856 people United States

Every breach this week, by country

United States 45

Country being checked 1

  • Substack 6 February 2026 · 663,121 accounts

Ransomware claims

Gangs named 229 organisations on their leak sites this week, against 151 the week before. A claim is the gang’s word, not a confirmed breach.

What regulators did

  • Monetary penaltie · UK Information Commissioner’s Office · MediaLab.AI, Inc. The decision 4 February 2026
Every week

Follow the brief: one entry a week (Atom). The 2026 report has the year so far.

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Found a mistake? Tell us and we correct it.