Browse publicly disclosed data breaches by affected accounts, date and exposed data types.
Affected423.9 Thousand
The 2026 Medela data breach is an incident dated to September 2026 and associated by a public breach source with 423,947 unique email addresses following extortion…
Affected1.1 Million
Dustin Group disclosed unauthorised access to some internal systems on 3 September 2026. The IT products and services provider, which operates in the Nordics and Benelux…
Affected129.6 Thousand
On September 1, 2026, Elekta AB said certain information in part of its IT environment had been accessed without authorization and extracted.
AffectedAt least 1,400
NovoCure Limited said in a September 1, 2026 filing with the U.S. Securities and Exchange Commission that it became aware of unauthorized access to certain information…
AffectedNot disclosed
On August 31, 2026, Jack Henry & Associates disclosed unauthorized activity in a limited portion of its internal, non-production corporate environment.
Affected71.9 Thousand
In late August 2026, the threat actor group ShinyHunters claimed responsibility for exfiltrating data from Neogen Corporation, a publicly traded international food…
Affected8.8 Million
Manchester Airports Group (MAG) disclosed on 27 August 2026 that an unauthorised third party had obtained customer data associated with services at Manchester, London…
Affected1.7 Million
McKesson discovered the cybersecurity incident on August 25, 2026, after employee corporate accounts were targeted.
AffectedNot disclosed
The 2026 Baxter International security incident became public through the medical-technology company’s August 13, 2026 statement disclosing unauthorized activity…
Affected101.3 Thousand
The Sharecare data breach occurred in August 2026 when extortion group ShinyHunters claimed unauthorized exfiltration from corporate Salesforce CRM and Microsoft Entra…
Affected12.9 Million
In August 2026, clothing retailer Carhartt was targeted by a ShinyHunters extortion campaign threatening to publish its data.
Affected1.2 Million
Questel confirmed unauthorized access to part of its Microsoft 365 environment in a statement provided on August 13, 2026.
