Privacy Unpacked
Menu

Weekly breach brief

Data breaches in the week of 16–22 February 2026

45 data breaches on the tracker, 45 confirmed by the organisation or a regulator.

Breaches
45
Notices in CA and WA
13
Ransomware claims
162
Largest
12.5M

The largest

  1. CarGurus 12,461,887 accounts
  2. University of Pennsylvania 623,750 accounts
  3. Canada Goose 581,877 accounts
  4. APOIA.se 450,764 accounts Sweden
  5. CarMax 431,371 accounts
  6. Mercadien PC Certified Public Accountants 402,760 people United States

Every breach this week, by country

United States 40

Country being checked 4

Sweden 1

  • APOIA.se 16 February 2026 · 450,764 accounts

Ransomware claims

Gangs named 162 organisations on their leak sites this week, against 209 the week before. A claim is the gang’s word, not a confirmed breach.

Every week

Follow the brief: one entry a week (Atom). The 2026 report has the year so far.

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Found a mistake? Tell us and we correct it.