Privacy Unpacked

Weekly breach brief

Data breaches in the week of 28 Sept – 4 Oct 2026

68 data breaches on the tracker, 67 confirmed by the organisation or a regulator.

Breaches
68
Notices in CA and WA
15
Ransomware claims
232
Largest
8.2M

The largest

  1. iRhythm Technologies Inc. 8,179,772 patients United States
  2. Poppins Payroll Company 246,937 people United States
  3. Denver Health Medical Plan 238,083 patients United States
  4. World Acceptance Corporation 232,401 people United States
  5. Technical University of Denmark (DTU) 200,000 current and former users Denmark
  6. Baltimore Medical System Inc 197,201 people United States

Every breach this week, by country

United States 67

Denmark 1

Ransomware claims

Gangs named 232 organisations on their leak sites this week, against 202 the week before. A claim is the gang’s word, not a confirmed breach.

Every week

Follow the brief: one entry a week (Atom). The 2026 report has the year so far.

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Found a mistake? Tell us and we correct it.