Weekly breach brief

Data breaches in the week of 27 Jul – 2 Aug 2026

26 data breaches on the tracker, 26 confirmed by the organisation or a regulator.

Breaches: 26
Notices in CA and WA: 15
Ransomware claims: 210
Largest: 865,336

The largest

SplitVPN 865,336 accounts
Houston City College 831,642 accounts United States
A-O-M-S, P.L.L.C. d/b/a Arkansas Oral & Maxillofacial Surgeons 64,831 patients United States
Tarboro Family Dentistry 4,713 patients United States
Interim HealthCare Inc. 1,283 patients United States
Manning Regional Healthcare Center 746 patients United States

Every breach this week, by country

United States 25

Houston City College 28 July 2026 · 831,642 accounts
A-O-M-S, P.L.L.C. d/b/a Arkansas Oral & Maxillofacial Surgeons 31 July 2026 · 64,831 patients
Aesto, LLC (Grant County Public Hospital District #2) 31 July 2026 · 37,253 Washington residents
ADT, Inc. 28 July 2026 · 32,546 Texas residents
Everside Health (Aesto, LLC) 31 July 2026 · 22,210 Texas residents
Jeffrey David Reuben MD 28 July 2026 · 14,172 Texas residents
Agave Dental Floresville 28 July 2026 · 11,790 Texas residents
JRK Property Holdings, Inc. 27 July 2026 · 11,120 Texas residents
Azle Smiles 28 July 2026 · 9,444 Texas residents
Kashi Dental 28 July 2026 · 6,027 Texas residents
Tarboro Family Dentistry 31 July 2026 · 4,713 patients
Microcode, Inc. (CommonSpirit Health) 30 July 2026 · 4,096 Washington residents
Allwyn Dental 28 July 2026 · 4,013 Texas residents
SM Energy Company 31 July 2026 · 3,851 Texas residents
Wilson Dental 28 July 2026 · 3,476 Texas residents
Mysa Dental 28 July 2026 · 3,394 Texas residents
Travis County Credit Union 31 July 2026 · 2,996 Texas residents
Goodwin Procter LLP 31 July 2026 · 1,550 Texas residents
Interim HealthCare Inc. 31 July 2026 · 1,283 patients
SPay Inc dba Stack Sports 27 July 2026 · 1,190 Washington residents
Manning Regional Healthcare Center 31 July 2026 · 746 patients
Bridgeway Benefit Technologies LLC 28 July 2026 · 659 Texas residents
TELUS International AI, Inc., d/b/a TELUS Digital 31 July 2026 · 625 Texas residents
MPS Enterprises, Inc. (“MPS”) 31 July 2026 · 481 Texas residents
Sunrise Company 31 July 2026 · 284 Texas residents

Country being checked 1

SplitVPN 1 August 2026 · 865,336 accounts

Ransomware claims

Gangs named 210 organisations on their leak sites this week, against 230 the week before. A claim is the gang’s word, not a confirmed breach.

The Gentlemen 43 claims
Crpxo 31 claims
Qilin 29 claims
NightSpire 12 claims
INC Ransom 11 claims
SafePay 9 claims

What regulators did

Reprimand · UK Information Commissioner’s Office · Chief Constable Commissioner for the Metropolis/ Metropolitan Police Service (MPS) The decision 27 July 2026
Enforcement notice · UK Information Commissioner’s Office · Chief Constable Commissioner for the Metropolis/ Metropolitan Police Service (MPS) The decision 27 July 2026

Every week

26 Oct – 1 Nov 2026 67 data breaches so far
19–25 October 2026 80 data breaches
12–18 October 2026 56 data breaches
5–11 October 2026 48 data breaches
28 Sept – 4 Oct 2026 68 data breaches
21–27 September 2026 62 data breaches
14–20 September 2026 57 data breaches
7–13 September 2026 33 data breaches
31 Aug – 6 Sept 2026 49 data breaches
24–30 August 2026 52 data breaches
17–23 August 2026 53 data breaches
10–16 August 2026 42 data breaches
3–9 August 2026 22 data breaches
27 Jul – 2 Aug 2026 26 data breaches
20–26 July 2026 7 data breaches

Follow the brief: one entry a week (Atom). The 2026 report has the year so far.

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Found a mistake? Tell us and we correct it.