Skip to content
Submit incident
Independent data breach database

The searchable record of personal data breaches and leaks.

Explore publicly reported breaches, leaks and exposures of personal data, the organizations involved, how each one happened, and the regulatory action that followed. GDPR first, with India's DPDP Act to follow.

No record in this dataset has been reviewed by an editor yet. Every record is built automatically from public reporting and shows its evidence status, so check the cited sources before relying on it.

/
1,829 public-source records monitored1,548 incident recordsExplore the database ›
Latest recordDII-2026-00376
DigiCert data breach exposes customer information, identity documents
Reported

DigiCert warns it suffered a data breach after a server migration mistakenly exposed an internal business system to the internet, allowing unauthorized access to customer information and identity documents. The...

Date
6 November 2026
Category
Accidental exposure and misconfiguration
Unreviewed recordView incident ›
1,548
Incident records
0
Organizations named
0
Countries
1,548
Classified by category
0
Citing a court or regulator
1
Public sources monitored
Counts represent incidents documented in this dataset, not estimates of true incident prevalence.Updated 14 November 2026 · dataset v2026.09

Explore the Index

Discover documented incidents by category, organization and source.

All incidentsSearch and filter every record by title, organization, category and date.Explore the database ›Categories9 breach-cause categories, from ransomware and intrusion to accidental exposure and regulatory action.Browse categories ›Organizations0 companies, agencies and institutions named in records.Browse organizations ›Method and standardsWhat counts as a data incident, how a record is built from public reporting and regulator sources, and what each evidence status means.Read the methodology ›

Recently documented

All incidents
Nov 2026DigiCert data breach exposes customer information, identity documentsReportedAccidental exposure and misconfigurationView incident ›
Nov 2026The Next Target for Data Breach Lawsuits - Law Firms That Represent Breached PartiesReportedRegulatory action and litigationView incident ›
Nov 2026NI: Parents warned to be on alert after school data breachReportedHacking and intrusionView incident ›
Nov 2026State attorneys general secure up to $10 million and corrective action plan from Perry Johnson companies after 2023 breachReportedThird-party and supply chainView incident ›
Nov 2026Korean court keeps Coupang’s record data breach fine in force, delays corrective action plan for 30 daysReportedHacking and intrusionView incident ›
Nov 2026UK: Royal Cornwall Hospitals Trust data breach exposed health details of 7,715 staffReportedAccidental exposure and misconfigurationView incident ›

What the data shows

Patterns across the records published so far. The dataset grows as more reporting is processed, so these figures describe the Index, not the world.

Incidents by category
Published incidents by editorial category.
Unit: incidents · Source: Data Incident Index v2026.09 · Updated 14 Nov 2026
Incidents by year of occurrence
When the documented events took place.
Unit: incidents · Source: Data Incident Index v2026.09 · Updated 14 Nov 2026
Where documented incidents happened
Country most directly associated with each incident. 0 countries so far.
FijiTanzaniaW. SaharaCanadaUnited States of AmericaKazakhstanUzbekistanPapua New GuineaIndonesiaArgentinaChileDem. Rep. CongoSomaliaKenyaSudanChadHaitiDominican Rep.RussiaBahamasFalkland Is.NorwayGreenlandFr. S. Antarctic LandsTimor-LesteSouth AfricaLesothoMexicoUruguayBrazilBoliviaPeruColombiaPanamaCosta RicaNicaraguaHondurasEl SalvadorGuatemalaBelizeVenezuelaGuyanaSurinameFranceEcuadorPuerto RicoJamaicaCubaZimbabweBotswanaNamibiaSenegalMaliMauritaniaBeninNigerNigeriaCameroonTogoGhanaCôte d'IvoireGuineaGuinea-BissauLiberiaSierra LeoneBurkina FasoCentral African Rep.CongoGabonEq. GuineaZambiaMalawiMozambiqueeSwatiniAngolaBurundiIsraelLebanonMadagascarPalestineGambiaTunisiaAlgeriaJordanUnited Arab EmiratesQatarKuwaitIraqOmanVanuatuCambodiaThailandLaosMyanmarVietnamNorth KoreaSouth KoreaMongoliaIndiaBangladeshBhutanNepalPakistanAfghanistanTajikistanKyrgyzstanTurkmenistanIranSyriaArmeniaSwedenBelarusUkrainePolandAustriaHungaryMoldovaRomaniaLithuaniaLatviaEstoniaGermanyBulgariaGreeceTurkeyAlbaniaCroatiaSwitzerlandLuxembourgBelgiumNetherlandsPortugalSpainIrelandNew CaledoniaSolomon Is.New ZealandAustraliaSri LankaChinaTaiwanItalyDenmarkUnited KingdomIcelandAzerbaijanGeorgiaPhilippinesMalaysiaBruneiSloveniaFinlandSlovakiaCzechiaEritreaJapanParaguayYemenSaudi ArabiaAntarcticaN. CyprusCyprusMoroccoEgyptLibyaEthiopiaDjiboutiSomalilandUgandaRwandaBosnia and Herz.MacedoniaSerbiaMontenegroKosovoTrinidad and TobagoS. Sudan
Incidents12+3+4+
Unit: incidents · Source: Data Incident Index v2026.09 · Updated 14 Nov 2026
Organizations named most often
Top 0 of 0 organizations across published incidents.
Documented incidents by organization
Unit: incidents · Source: Data Incident Index v2026.09 · Updated 14 Nov 2026

Based on incidents currently recorded in the Data Incident Index. Many breaches are never reported publicly, so this dataset does not represent every data breach.

Evidence before conclusions.

Every record is built from public reporting and regulator sources and classified using a consistent, published methodology.

Counts describe what has been documented in this dataset, never an estimate of how often data breaches occur.

Read our methodologyView sourcing standards
Sourced
Every record links the public reporting or regulator material it was built from.
Graded
Every record carries an evidence status. A record built from a single report stays Reported until stronger evidence is cited.
Reviewed or marked
A record names its reviewer only once an editor has checked its sources. Until then it is shown as unreviewed.
Classified
Records carry a breach-cause category and, where the source supports it, an industry and an organization.
Citable
APA, MLA, BibTeX and plain-text citations on every incident page.
Correctable
Anyone, including the organizations named, can submit a correction at no cost.

Help improve the public record.

Know of a breach or leak we should include, or found something that needs correcting?

Submit an incidentSuggest a correction