Privacy Unpacked

Weekly breach brief

Data breaches in the week of 21–27 September 2026

62 data breaches on the tracker, 62 confirmed by the organisation or a regulator.

Breaches
62
Notices in CA and WA
18
Ransomware claims
202
Largest
17.8M

The largest

  1. LimeLeads 17,838,396 accounts
  2. Burger King Russia 3,155,792 accounts Russia
  3. Saber Healthcare Inc. 427,084 people United States
  4. Ridgeway Pharmacy Ltd 258,920 patients United States
  5. Fairwinds Credit Union 165,054 people United States
  6. OneMain Financial Group, LLC 122,783 people United States

Every breach this week, by country

United States 60

Country being checked 1

  • LimeLeads 22 September 2026 · 17,838,396 accounts

Russia 1

Ransomware claims

Gangs named 202 organisations on their leak sites this week, against 212 the week before. A claim is the gang’s word, not a confirmed breach.

Every week

Follow the brief: one entry a week (Atom). The 2026 report has the year so far.

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Found a mistake? Tell us and we correct it.