Privacy Unpacked

Weekly breach brief

Data breaches in the week of 5–11 October 2026

48 data breaches on the tracker, 46 confirmed by the organisation or a regulator.

Breaches
48
Notices in CA and WA
7
Ransomware claims
264
Largest
8.8M

The largest

  1. Danish Central Person Register (CPR) 8,800,000 people Denmark
  2. Angel One 6,765,054 accounts India
  3. Ricardo 890,000 accounts Switzerland
  4. Neogen 435,963 accounts United States
  5. CyrusOne 373,460 accounts United States
  6. Double Counter 274,922 accounts France

Every breach this week, by country

United States 43

Denmark 1

India 1

  • Angel One 7 October 2026 · 6,765,054 accounts

Switzerland 1

  • Ricardo reported 11 October 2026 · 890,000 accounts

France 1

Netherlands 1

  • TUI reported 11 October 2026

Ransomware claims

Gangs named 264 organisations on their leak sites this week, against 232 the week before. A claim is the gang’s word, not a confirmed breach.

Every week

Follow the brief: one entry a week (Atom). The 2026 report has the year so far.

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Found a mistake? Tell us and we correct it.