Data breaches in the week of 31 Aug – 6 Sept 2026

The largest

1. Manchester Airports Group 8,849,657 accounts United Kingdom
2. Questel 1,226,209 accounts
3. Catalyst Brands LLC 187,341 people United States
4. HumanEdge, Inc 58,596 people United States
5. Fiesta Insurance Franchise Corporation 48,092 people United States
6. Bimbo Bakeries USA (Oracle) 46,064 people United States

Every breach this week, by country

United States 47

• Catalyst Brands LLC 4 September 2026 · 187,341 people
• Berkeley Research Group, LLC 1 September 2026 · 92,290 Texas residents
• HumanEdge, Inc 1 September 2026 · 58,596 people
• Fiesta Insurance Franchise Corporation 2 September 2026 · 48,092 people
• Bimbo Bakeries USA (Oracle) 31 August 2026 · 46,064 people
• Wend American Group LLC 1 September 2026 · 45,264 people
• Brown, Jake & McDaniel, P.C. 3 September 2026 · 43,605 people
• Provident Behavioral Health 4 September 2026 · 25,086 patients
• Oculus Pathology 2 September 2026 · 20,040 patients
• Viking Enterprises, Inc. d/b/a City Ambulance Service 31 August 2026 · 14,324 patients
• Alvita Care Holdings 4 September 2026 · 10,128 people
• Hamaspik (Choice and Inc.) 6 September 2026 · 8,181 patients
• First Advantage Corporation 3 September 2026 · 6,272 Texas residents
• Gale Credit Union 3 September 2026 · 4,728 people
• Abramson, Brown & Dugan 2 September 2026 · 3,222 people
• YouLend US LLC 3 September 2026 · 2,826 Texas residents
• Family Physicians, Inc. 3 September 2026 · 2,545 patients
• DeMera DeMera Cameron LLP 1 September 2026 · 2,387 people
• Fraser Trebilcock Davis Dunlap & Cavanaugh P.C 3 September 2026 · 2,014 people
• P & N Machine Co, Inc. 1 September 2026 · 1,957 Texas residents
• Life Unlimited, Inc. 4 September 2026 · 1,530 patients
• Mogren, Glessner & Ahrens, P.S. 3 September 2026 · 1,379 Washington residents
• Arena Americas 1 September 2026 · 731 Texas residents
• The Foot and Ankle Wellness Center of Western Pennsylvania 31 August 2026 · 653 patients
• Pioneer International Inc 3 September 2026 · 630 people
• Virta Health Corp. and Virta Medical, PC (Department of Health And Human Services) 3 September 2026 · 606 Texas residents
• Mfort Security Services PLLC 3 September 2026 · 598 people
• California Creative Solutions Inc 31 August 2026 · 544 people
• Coryell County, Texas 3 September 2026 · 542 Texas residents
• The Lighthouse for the Blind, Inc. 3 September 2026 · 520 Washington residents
• Beaver County Behavioral Health 4 September 2026 · 501 patients
• COMHAR, Inc. 4 September 2026 · 501 patients
• Craneware, Inc. 2 September 2026 · 501 patients
• LHC Group, Inc. 4 September 2026 · 500 patients
• Duval County, Texas 1 September 2026 · 474 Texas residents
• Tronair Inc 31 August 2026 · 417 people
• Axios Industrial Group 3 September 2026 · 391 Texas residents
• St. Joseph County, Indiana 3 September 2026 · 380 people
• FCCI Insurance Group 3 September 2026 · 376 Texas residents
• Bristol Bay Native Corporation 3 September 2026 · 339 Texas residents
• MasterTech Services Inc 4 September 2026 · 295 people
• Zaxis Financial Services Americas LLC 1 September 2026 · 277 people
• Onward Consulting Corp 1 September 2026 · 196 people
• Eckert Seamans Cherin & Mellott, LLC 3 September 2026 · 194 people
• Buckeye Power Sales 4 September 2026 · 170 people
• Point Park University 2 September 2026 · 54 people
• South Bend Orthopedics 1 September 2026 · 8 people

United Kingdom 1

• Manchester Airports Group 2 September 2026 · 8,849,657 accounts

Country being checked 1

• Questel 1 September 2026 · 1,226,209 accounts

Ransomware claims

Gangs named 204 organisations on their leak sites this week, against 240 the week before. A claim is the gang’s word, not a confirmed breach.

• Settra 17 claims
• Qilin 16 claims
• Krybit 15 claims
• INC Ransom 13 claims
• Akira 11 claims
• The Gentlemen 10 claims