Privacy Unpacked
Menu

Weekly breach brief

Data breaches in the week of 19–25 October 2026

80 data breaches on the tracker, 53 confirmed by the organisation or a regulator.

Breaches
80
Notices in CA and WA
12
Ransomware claims
224
Largest
53.2M

The largest

  1. Sagawa Express 53,230,000 records Japan
  2. Capcom 12,000,000 accounts Japan
  3. Park24 Co. 6,620,000 accounts Japan
  4. Railway 4,800,000 users
  5. I-CAD (French pet register) 2,900,000 records of cat owners France
  6. Hollys 2,760,000 customer records South Korea

Every breach this week, by country

United States 38

Japan 7

Country being checked 7

France 6

South Korea 5

Denmark 4

Canada 2

India 2

Germany 1

United Kingdom 1

Seychelles 1

Portugal 1

Türkiye 1

Australia 1

Lithuania 1

Spain 1

  • Cudeca reported 20 October 2026

Brazil 1

Ransomware claims

Gangs named 224 organisations on their leak sites this week, against 326 the week before. A claim is the gang’s word, not a confirmed breach.

Every week

Follow the brief: one entry a week (Atom). The 2026 report has the year so far.

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Found a mistake? Tell us and we correct it.