Weekly breach brief
Data breaches in the week of 24–30 August 2026
52 data breaches on the tracker, 52 confirmed by the organisation or a regulator.
- Breaches
- 52
- Notices in CA and WA
- 15
- Ransomware claims
- 240
- Largest
- 12.9M
The largest
- Carhartt 12,933,413 accounts United States
- Healthfirst Bluegrass, Inc. 139,834 people United States
- Bell American Group LLC 115,346 people United States
- Issaqueena Pediatric Dentistry 91,250 people United States
- Osceola Mental Health Inc. dba Park Place Behavioral Healthcare 71,702 patients United States
- RB American Group LLC 66,608 people United States
Every breach this week, by country
United States 52
- Carhartt 25 August 2026 · 12,933,413 accounts
- Healthfirst Bluegrass, Inc. 26 August 2026 · 139,834 people
- Bell American Group LLC 26 August 2026 · 115,346 people
- Issaqueena Pediatric Dentistry 28 August 2026 · 91,250 people
- Osceola Mental Health Inc. dba Park Place Behavioral Healthcare 26 August 2026 · 71,702 patients
- RB American Group LLC 28 August 2026 · 66,608 people
- Pan American Group LLC 24 August 2026 · 55,215 people
- Bennett College 28 August 2026 · 30,065 people
- See’s Candies, Inc. 27 August 2026 · 23,737 people
- Advantage Home Health Care 25 August 2026 · 19,851 patients
- Integrated Speciality Coverages LLC 27 August 2026 · 12,844 people
- Kim Knobbe 27 August 2026 · 11,927 patients
- Edwards County Medical Center 26 August 2026 · 11,862 people
- Central National Gottesman Inc. 27 August 2026 · 9,126 people
- Psychiatry of Texas PLLC 27 August 2026 · 5,902 patients
- McDermott Will & Schulte LLP 26 August 2026 · 5,427 patients
- CITGO Petroleum Corporation 26 August 2026 · 4,611 people
- News Corp UK & Ireland Limited 26 August 2026 · 3,304 Washington residents
- Lovejoy Independent School District 28 August 2026 · 2,666 Texas residents
- Doleac Electric Company Inc 26 August 2026 · 1,985 people
- Integrated Specialty Coverages, LLC (“ISC) 28 August 2026 · 1,836 Texas residents
- Greystar Real Estate Partners, LLC 27 August 2026 · 1,831 people
- Together Women's Health LLC (Aesto) 28 August 2026 · 1,546 Texas residents
- Castle Management LLC 25 August 2026 · 1,474 people
- White River Junction VA Medical Center 28 August 2026 · 1,408 patients
- Motley's Auctions 28 August 2026 · 1,401 people
- Punch & Associates Investment Management Inc 24 August 2026 · 1,089 people
- Roese Pipeline Company Inc 26 August 2026 · 854 people
- Murfreesboro Medical Clinic (Aesto, LLC d/b/a Aesto Health) 26 August 2026 · 845 Washington residents
- Roese Contracting Company Inc 26 August 2026 · 750 people
- AvtechTyee Inc 28 August 2026 · 734 people
- The Florida Aquarium 24 August 2026 · 646 people
- Cascade Coffee, LLC 26 August 2026 · 610 Washington residents
- Allied Health MSO Holdco, LLC 25 August 2026 · 573 Texas residents
- Shoshone Medical Center 25 August 2026 · 553 patients
- Iroquois Memorial Hospital 28 August 2026 · 547 Texas residents
- Spectrum Laboratory Products Inc 26 August 2026 · 547 people
- AnMed Health 27 August 2026 · 501 patients
- Vista Del Mar Child and Family Services 29 August 2026 · 500 patients
- WellDyneRX, LLC 25 August 2026 · 500 patients
- Rhodes, Young, Black, and Duncan 25 August 2026 · 330 Texas residents
- Bain Capital LP 27 August 2026 · 151 people
- TitleEase LLC 28 August 2026 · 107 people
- Spray Equipment & Service Center LLC 24 August 2026 · 87 people
- The Health Trust & it's subsidiary FASS 26 August 2026 · 28 Indiana residents
- Berg Lilly P.C. 28 August 2026 · 27 people
- Community Alternatives Unlimited 26 August 2026 · 21 people
- Vanderburgh County Prosecutor's Office 27 August 2026 · 4 people
- Ocean Edge Resort and Golf Club 25 August 2026 · 3 Indiana residents
- ExamOne 28 August 2026 · 1 people
- Indiana Professional Licensing Agency 28 August 2026 · 1 people
- Musarubra US LLC dba Trellix 28 August 2026 · 1 people
Ransomware claims
Gangs named 240 organisations on their leak sites this week, against 276 the week before. A claim is the gang’s word, not a confirmed breach.
- Qilin 44 claims
- The Gentlemen 22 claims
- Zawoo 16 claims
- Krybit 13 claims
- Akira 12 claims
- Silentransomgroup 10 claims
Every week
- 26 Oct – 1 Nov 2026 67 data breaches so far
- 19–25 October 2026 80 data breaches
- 12–18 October 2026 56 data breaches
- 5–11 October 2026 48 data breaches
- 28 Sept – 4 Oct 2026 68 data breaches
- 21–27 September 2026 62 data breaches
- 14–20 September 2026 57 data breaches
- 7–13 September 2026 33 data breaches
- 31 Aug – 6 Sept 2026 49 data breaches
- 24–30 August 2026 52 data breaches
- 17–23 August 2026 53 data breaches
- 10–16 August 2026 42 data breaches
- 3–9 August 2026 22 data breaches
- 27 Jul – 2 Aug 2026 26 data breaches
- 20–26 July 2026 7 data breaches
Follow the brief: one entry a week (Atom). The 2026 report has the year so far.
From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Found a mistake? Tell us and we correct it.