Privacy Unpacked

Weekly breach brief

Data breaches in the week of 26 Oct – 1 Nov 2026

134 data breaches on the tracker, 63 confirmed by the organisation or a regulator.

Breaches
134
Notices in CA and WA
12
Ransomware claims
279
Largest
335.0M

The largest

  1. Binance 335,000,000 users
  2. Ryohin Keikaku 27,260,000 users Japan
  3. BK Japan 11,180,000 accounts Japan
  4. Yumilink 9,000,000 records
  5. Central Person Register of Denmark 8,800,000 people Denmark
  6. Joshin 6,230,000 records Japan

Every breach this week, by country

United States 49

Show 39 more

Japan 25

Show 15 more

Country being checked 19

Show 9 more

South Korea 9

France 4

United Kingdom 4

Denmark 3

Moldova 2

Hong Kong SAR China 2

Brazil 2

Germany 2

Sweden 2

Indonesia 1

  • Fore 28 October 2026 · 5,700,000 accounts

Switzerland 1

Russia 1

  • Rosstat 1 November 2026 · 25,000 computers

Spain 1

Finland 1

Netherlands 1

  • Bitonic 27 October 2026 · 3 customers

Poland 1

India 1

Austria 1

Italy 1

Belgium 1

Ransomware claims

Gangs named 279 organisations on their leak sites this week, against 224 the week before. A claim is the gang’s word, not a confirmed breach.

What regulators did

  • Reprimand · UK Information Commissioner’s Office · Staffordshire Police The decision 27 October 2026
Every week

Follow the brief: one entry a week (Atom). The 2026 report has the year so far.

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Found a mistake? Tell us and we correct it.