Weekly breach brief
Data breaches in the week of 13–19 April 2026
51 data breaches on the tracker, 51 confirmed by the organisation or a regulator.
- Breaches
- 51
- Notices in CA and WA
- 21
- Ransomware claims
- 218
- Largest
- 13.5M
The largest
- McGraw Hill 13,500,136 accounts
- Amtrak 2,147,679 accounts
- Restaurant Management Co. of Wichita, Inc. 120,416 people United States
- TransGlobal Insurance Agency 71,597 people United States
- Goodwin University, Inc. 56,156 people United States
- Ameriprise Financial, Inc.  48,034 people United States
Every breach this week, by country
United States 49
- Restaurant Management Co. of Wichita, Inc. 17 April 2026 · 120,416 people
- TransGlobal Insurance Agency 16 April 2026 · 71,597 people
- Goodwin University, Inc. 16 April 2026 · 56,156 people
- Ameriprise Financial, Inc.  17 April 2026 · 48,034 people
- Hallisey & D'Agostino, LLP 17 April 2026 · 16,683 people
- Bank3 15 April 2026 · 11,512 people
- Alaska Air Group Federal Credit Union 17 April 2026 · 10,705 Oregon residents
- Alaska Air Group Credit Union 16 April 2026 · 10,705 people
- Bayside Dental 17 April 2026 · 9,683 Washington residents
- TELUS International AI Inc. 17 April 2026 · 9,343 Washington residents
- Colombia Bank 17 April 2026 · 7,067 Oregon residents
- Pediatric Products, LLC 14 April 2026 · 5,911 Texas residents
- The Trustees of the University of Pennsylvania 15 April 2026 · 5,878 Washington residents
- Rev Up Brands, LLC 17 April 2026 · 5,841 people
- Madison Area YMCA 17 April 2026 · 4,121 people
- Mullinax Ford of Central Florida 15 April 2026 · 4,088 people
- Nobu Restaurant Group Holding Company, LLC 17 April 2026 · 3,171 people
- Informa Canada Inc. dba Shop FAN EXPO 17 April 2026 · 2,290 people
- Law Office of Michael R. De La Paz 13 April 2026 · 2,000 Texas residents
- Phoenix Art Museum 15 April 2026 · 1,758 people
- ELC Holding Company 16 April 2026 · 1,656 people
- Columbia Bank 17 April 2026 · 1,607 Washington residents
- Panera, LLC 16 April 2026 · 1,564 Washington residents
- Sagent Pharmaceuticals 17 April 2026 · 1,383 people
- Hays County Emergency Services District No. 3 17 April 2026 · 1,081 Texas residents
- Kaufman & Stigger PLLC 16 April 2026 · 939 people
- O'Day Management Inc 17 April 2026 · 938 people
- Providence 16 April 2026 · 838 Washington residents
- Passco Companies, LLC 17 April 2026 · 806 people
- Alvin E Benike Inc dba Benike Construction 17 April 2026 · 748 people
- Scarsdale Investment Group Ltd 15 April 2026 · 560 people
- Conrad Capital Management Inc 15 April 2026 · 539 people
- Cookeville Regional Medical Center 17 April 2026 · 529 Texas residents
- Georgia Heritage Federal Credit Union 17 April 2026 · 294 Texas residents
- Advanced Rehabilitation Technology 16 April 2026 · 205 people
- Contractors Supply Inc 16 April 2026 · 181 people
- Mary Lee Foundation 17 April 2026 · 145 Texas residents
- Grobet File Company of America LLC 16 April 2026 · 128 people
- Hoshino USA Inc 15 April 2026 · 97 people
- Farrell Fritz, P.C. 16 April 2026 · 12 Vermont residents
- Connected Credit Union 17 April 2026 · 8 Vermont residents
- Markowitz, Ringel, Trusty, & Hartog P.A 16 April 2026 · 8 Indiana residents
- Harrison County Hospital 17 April 2026 · 1 people
- Income Property Management Co. 15 April 2026 · 1 Oregon residents
- Indianapolis Power & Light Company dba AES Indiana 14 April 2026 · 1 people
- DOUGLAS M SMITH & CO CPAS 15 April 2026
- City Health, a medical corporation 14 April 2026
- Lechtenberg Law Office, LLC dba Bauch & Lechtenberg Law 13 April 2026
- Rci Hospitality Holdings, Inc. 13 April 2026
Country being checked 2
- McGraw Hill 16 April 2026 · 13,500,136 accounts
- Amtrak 17 April 2026 · 2,147,679 accounts
Ransomware claims
Gangs named 218 organisations on their leak sites this week, against 166 the week before. A claim is the gang’s word, not a confirmed breach.
- The Gentlemen 38 claims
- LockBit 5.0 27 claims
- DragonForce 22 claims
- Coinbasecartel 21 claims
- Qilin 15 claims
- Lamashtu 14 claims
Every week
- 26 Oct – 1 Nov 2026 67 data breaches so far
- 19–25 October 2026 80 data breaches
- 12–18 October 2026 54 data breaches
- 5–11 October 2026 48 data breaches
- 28 Sept – 4 Oct 2026 68 data breaches
- 21–27 September 2026 67 data breaches
- 14–20 September 2026 71 data breaches
- 7–13 September 2026 46 data breaches
- 31 Aug – 6 Sept 2026 61 data breaches
- 24–30 August 2026 59 data breaches
- 17–23 August 2026 56 data breaches
- 10–16 August 2026 67 data breaches
- 3–9 August 2026 69 data breaches
- 27 Jul – 2 Aug 2026 60 data breaches
- 20–26 July 2026 39 data breaches
- 13–19 July 2026 50 data breaches
- 6–12 July 2026 49 data breaches
- 29 Jun – 5 Jul 2026 49 data breaches
- 22–28 June 2026 56 data breaches
- 15–21 June 2026 40 data breaches
- 8–14 June 2026 49 data breaches
- 1–7 June 2026 57 data breaches
- 25–31 May 2026 54 data breaches
- 18–24 May 2026 50 data breaches
- 11–17 May 2026 61 data breaches
- 4–10 May 2026 53 data breaches
- 27 Apr – 3 May 2026 48 data breaches
- 20–26 April 2026 41 data breaches
- 13–19 April 2026 51 data breaches
- 6–12 April 2026 38 data breaches
- 30 Mar – 5 Apr 2026 44 data breaches
- 23–29 March 2026 61 data breaches
- 16–22 March 2026 46 data breaches
- 9–15 March 2026 51 data breaches
- 2–8 March 2026 41 data breaches
- 23 Feb – 1 Mar 2026 50 data breaches
- 16–22 February 2026 45 data breaches
- 9–15 February 2026 50 data breaches
- 2–8 February 2026 46 data breaches
- 26 Jan – 1 Feb 2026 48 data breaches
- 19–25 January 2026 24 data breaches
- 12–18 January 2026 47 data breaches
- 5–11 January 2026 48 data breaches
- 29 Dec – 4 Jan 2026 30 data breaches
- 22–28 December 2025 24 data breaches
- 15–21 December 2025 26 data breaches
- 8–14 December 2025 28 data breaches
- 1–7 December 2025 20 data breaches
- 24–30 November 2025 12 data breaches
- 17–23 November 2025 32 data breaches
- 10–16 November 2025 24 data breaches
- 3–9 November 2025 24 data breaches
- 27 Oct – 2 Nov 2025 14 data breaches
- 20–26 October 2025 11 data breaches
- 13–19 October 2025 13 data breaches
- 6–12 October 2025 13 data breaches
- 29 Sept – 5 Oct 2025 16 data breaches
- 22–28 September 2025 14 data breaches
- 15–21 September 2025 18 data breaches
- 8–14 September 2025 18 data breaches
- 1–7 September 2025 9 data breaches
- 25–31 August 2025 18 data breaches
- 18–24 August 2025 14 data breaches
- 11–17 August 2025 11 data breaches
- 4–10 August 2025 11 data breaches
- 28 Jul – 3 Aug 2025 17 data breaches
- 21–27 July 2025 16 data breaches
- 14–20 July 2025 24 data breaches
- 7–13 July 2025 15 data breaches
- 30 Jun – 6 Jul 2025 14 data breaches
- 23–29 June 2025 21 data breaches
- 16–22 June 2025 9 data breaches
- 9–15 June 2025 15 data breaches
- 2–8 June 2025 15 data breaches
- 26 May – 1 Jun 2025 5 data breaches
- 19–25 May 2025 19 data breaches
- 12–18 May 2025 15 data breaches
- 5–11 May 2025 20 data breaches
- 28 Apr – 4 May 2025 15 data breaches
- 21–27 April 2025 15 data breaches
- 14–20 April 2025 10 data breaches
- 7–13 April 2025 29 data breaches
- 31 Mar – 6 Apr 2025 19 data breaches
- 24–30 March 2025 17 data breaches
- 17–23 March 2025 19 data breaches
- 10–16 March 2025 25 data breaches
- 3–9 March 2025 22 data breaches
- 24 Feb – 2 Mar 2025 61 data breaches
- 17–23 February 2025 11 data breaches
- 10–16 February 2025 14 data breaches
- 3–9 February 2025 15 data breaches
- 27 Jan – 2 Feb 2025 20 data breaches
- 20–26 January 2025 11 data breaches
- 13–19 January 2025 16 data breaches
- 6–12 January 2025 17 data breaches
- 30 Dec – 5 Jan 2025 7 data breaches
- 23–29 December 2024 9 data breaches
- 16–22 December 2024 23 data breaches
- 9–15 December 2024 18 data breaches
- 2–8 December 2024 12 data breaches
- 25 Nov – 1 Dec 2024 7 data breaches
- 18–24 November 2024 14 data breaches
- 11–17 November 2024 18 data breaches
- 4–10 November 2024 16 data breaches
- 28 Oct – 3 Nov 2024 13 data breaches
- 21–27 October 2024 14 data breaches
- 14–20 October 2024 13 data breaches
- 7–13 October 2024 22 data breaches
- 30 Sept – 6 Oct 2024 16 data breaches
- 23–29 September 2024 11 data breaches
- 16–22 September 2024 15 data breaches
- 9–15 September 2024 12 data breaches
- 2–8 September 2024 15 data breaches
- 26 Aug – 1 Sept 2024 22 data breaches
- 19–25 August 2024 16 data breaches
- 12–18 August 2024 14 data breaches
- 5–11 August 2024 17 data breaches
- 29 Jul – 4 Aug 2024 15 data breaches
- 22–28 July 2024 15 data breaches
- 15–21 July 2024 18 data breaches
- 8–14 July 2024 13 data breaches
- 1–7 July 2024 10 data breaches
- 24–30 June 2024 17 data breaches
- 17–23 June 2024 14 data breaches
- 10–16 June 2024 16 data breaches
- 3–9 June 2024 19 data breaches
- 27 May – 2 Jun 2024 20 data breaches
- 20–26 May 2024 26 data breaches
- 13–19 May 2024 12 data breaches
- 6–12 May 2024 17 data breaches
- 29 Apr – 5 May 2024 20 data breaches
- 22–28 April 2024 14 data breaches
- 15–21 April 2024 19 data breaches
- 8–14 April 2024 14 data breaches
- 1–7 April 2024 19 data breaches
- 25–31 March 2024 24 data breaches
- 18–24 March 2024 31 data breaches
- 11–17 March 2024 14 data breaches
- 4–10 March 2024 14 data breaches
- 26 Feb – 3 Mar 2024 28 data breaches
- 19–25 February 2024 15 data breaches
- 12–18 February 2024 12 data breaches
- 5–11 February 2024 17 data breaches
- 29 Jan – 4 Feb 2024 17 data breaches
- 22–28 January 2024 14 data breaches
- 15–21 January 2024 11 data breaches
- 8–14 January 2024 21 data breaches
- 1–7 January 2024 13 data breaches
- 25–31 December 2023 12 data breaches
- 18–24 December 2023 32 data breaches
- 11–17 December 2023 22 data breaches
- 4–10 December 2023 25 data breaches
- 27 Nov – 3 Dec 2023 17 data breaches
- 20–26 November 2023 19 data breaches
- 13–19 November 2023 14 data breaches
- 6–12 November 2023 13 data breaches
- 30 Oct – 5 Nov 2023 17 data breaches
- 23–29 October 2023 13 data breaches
- 16–22 October 2023 15 data breaches
- 9–15 October 2023 15 data breaches
- 2–8 October 2023 19 data breaches
- 25 Sept – 1 Oct 2023 9 data breaches
- 18–24 September 2023 21 data breaches
- 11–17 September 2023 14 data breaches
- 4–10 September 2023 14 data breaches
- 28 Aug – 3 Sept 2023 27 data breaches
- 21–27 August 2023 23 data breaches
- 14–20 August 2023 17 data breaches
- 7–13 August 2023 24 data breaches
- 31 Jul – 6 Aug 2023 20 data breaches
- 24–30 July 2023 38 data breaches
- 17–23 July 2023 25 data breaches
- 10–16 July 2023 22 data breaches
- 3–9 July 2023 10 data breaches
- 26 Jun – 2 Jul 2023 23 data breaches
- 19–25 June 2023 11 data breaches
- 12–18 June 2023 16 data breaches
- 5–11 June 2023 11 data breaches
- 29 May – 4 Jun 2023 9 data breaches
- 22–28 May 2023 18 data breaches
- 15–21 May 2023 15 data breaches
- 8–14 May 2023 14 data breaches
- 1–7 May 2023 9 data breaches
- 24–30 April 2023 17 data breaches
- 17–23 April 2023 11 data breaches
- 10–16 April 2023 17 data breaches
- 3–9 April 2023 12 data breaches
- 27 Mar – 2 Apr 2023 18 data breaches
- 20–26 March 2023 13 data breaches
- 13–19 March 2023 14 data breaches
- 6–12 March 2023 17 data breaches
- 27 Feb – 5 Mar 2023 21 data breaches
- 20–26 February 2023 7 data breaches
- 13–19 February 2023 15 data breaches
- 6–12 February 2023 9 data breaches
- 30 Jan – 5 Feb 2023 15 data breaches
- 23–29 January 2023 12 data breaches
- 16–22 January 2023 14 data breaches
- 9–15 January 2023 10 data breaches
- 2–8 January 2023 8 data breaches
- 26 Dec – 1 Jan 2023 2 data breaches
Follow the brief: one entry a week (Atom). The 2026 report has the year so far.
From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Found a mistake? Tell us and we correct it.