Live disclosure tracker · updated continuously

2026 Data Breaches Year-to-Date

2026 continues the year-over-year growth trend in confirmed disclosures. The list below updates as new breaches are reported by Verizon DBIR partners and major security news outlets.

98B+
Records Exposed
1072
Incidents
94+
Countries
+104%
Breach Velocity YoY
View Live Map → Run Free Exposure Scan RSS
Browse by sector
All breaches Healthcare Finance Government Technology Retail Education Legal
Browse by year
2024 2025 2026 2026 Index

2026 Data Breaches Year-to-Date (1072 indexed)

high · tech · Mar 11, 2026

n8n n8n

n8n Improper Control of Dynamically-Managed Code Resources Vulnerability — n8n contains an improper control of dynamically managed code resources vulnerability in its workflow expression evaluation system that allows for

View incident → Original disclosure Indexed 4 months ago
high · tech · Mar 9, 2026

Omnissa Workspace One UEM

Omnissa Workspace ONE Server-Side Request Forgery — Omnissa Workspace One UEM formerly known as VMware Workspace One UEM contains a server-side request forgery (SSRF) vulnerability that could allow a malicious actor with

View incident → Original disclosure Indexed 4 months, 1 week ago
high · tech · Mar 9, 2026

Ivanti Endpoint Manager (EPM)

Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability — Ivanti Endpoint Manager (EPM) contains an authentication bypass using an alternate path or channel vulnerability that could allow a remote unauthenticat

View incident → Original disclosure Indexed 4 months, 1 week ago
high · tech · Mar 9, 2026

SolarWinds Web Help Desk

SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability — SolarWinds Web Help Desk contain a deserialization of untrusted data vulnerability in AjaxProxy that could allow an attacker to run commands on t

View incident → Original disclosure Indexed 4 months, 1 week ago
high · tech · Mar 5, 2026

Hikvision Multiple Products

Hikvision Multiple Products Improper Authentication Vulnerability — Multiple Hikvision products contain an improper authentication vulnerability that could allow a malicious user to escalate privileges on the system and

View incident → Original disclosure Indexed 4 months, 1 week ago
high · tech · Mar 3, 2026

Provecho

712,904 records exposed — Email addresses, Usernames

View incident → Indexed 4 months, 2 weeks ago
medium · tech · Mar 2, 2026

Quitbro

22,874 records exposed — Email addresses, Partial dates of birth, Usernames

View incident → Indexed 4 months, 2 weeks ago
medium · tech · Mar 2, 2026

Lovora

495,556 records exposed — Display names, Email addresses, Profile photos

View incident → Indexed 4 months, 2 weeks ago
high · tech · Mar 2, 2026

KomikoAI

1,060,191 records exposed — AI prompts, Email addresses, Forum posts, Names

View incident → Indexed 4 months, 2 weeks ago
critical · finance · Feb 26, 2026

Odido

6,077,025 records exposed — Bank account numbers, Customer service records, Dates of birth, Driver's licenses and 7 more

View incident → Original disclosure Indexed 4 months, 3 weeks ago
critical · retail · Feb 22, 2026

CarGurus

12,461,887 records exposed — Email addresses, IP addresses, Names, Phone numbers and 1 more

View incident → Indexed 4 months, 3 weeks ago
medium · retail · Feb 20, 2026

CarMax

431,371 records exposed — Email addresses, Names, Phone numbers, Physical addresses

View incident → Indexed 4 months, 3 weeks ago
high · finance · Feb 18, 2026

Figure

967,178 records exposed — Dates of birth, Email addresses, Names, Phone numbers and 1 more

View incident → Indexed 4 months, 4 weeks ago
high · finance · Feb 17, 2026

Canada Goose

581,877 records exposed — Device information, Email addresses, IP addresses, Names and 4 more

View incident → Indexed 5 months ago
medium · tech · Feb 16, 2026

APOIA.se

450,764 records exposed — Email addresses, Names, Physical addresses

View incident → Indexed 5 months ago