Privacy Unpacked
Menu

Weekly breach brief

Data breaches in the week of 18–24 May 2026

50 data breaches on the tracker, 50 confirmed by the organisation or a regulator.

Breaches
50
Notices in CA and WA
15
Ransomware claims
144
Largest
34.5M

The largest

  1. Addi 34,532,941 accounts
  2. CTT 468,124 accounts Portugal
  3. Radiology Associates of Richmond, Inc. 266,183 people United States
  4. The Beacon Mutual Insurance Company 162,439 people United States
  5. Cardinal Services, Inc. 142,323 people United States
  6. Dragonica Lunaris 126,293 accounts

Every breach this week, by country

United States 46

Country being checked 3

Portugal 1

  • CTT 19 May 2026 · 468,124 accounts

Ransomware claims

Gangs named 144 organisations on their leak sites this week, against 164 the week before. A claim is the gang’s word, not a confirmed breach.

What regulators did

  • Reprimand · UK Information Commissioner’s Office · Suffolk Constabulary The decision 20 May 2026
  • Reprimand · UK Information Commissioner’s Office · Norfolk Constabulary The decision 20 May 2026
Every week

Follow the brief: one entry a week (Atom). The 2026 report has the year so far.

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Found a mistake? Tell us and we correct it.