Privacy Unpacked

Weekly breach brief

Data breaches in the week of 20–26 April 2026

41 data breaches on the tracker, 41 confirmed by the organisation or a regulator.

Breaches
41
Notices in CA and WA
11
Ransomware claims
138
Largest
6.0M

The largest

  1. Carnival Corporation 5,995,277 people United States
  2. Udemy 1,401,259 accounts
  3. City of Suffolk, Virginia 157,725 people United States
  4. Rodenburg Law Firm 119,895 people United States
  5. GrayRobinson, P.A. 80,383 people United States
  6. Transport Workers Union Local 100 46,400 people United States

Every breach this week, by country

United States 40

Country being checked 1

  • Udemy 26 April 2026 · 1,401,259 accounts

Ransomware claims

Gangs named 138 organisations on their leak sites this week, against 218 the week before. A claim is the gang’s word, not a confirmed breach.

Every week

Follow the brief: one entry a week (Atom). The 2026 report has the year so far.

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Found a mistake? Tell us and we correct it.