Weekly Breach Intelligence Briefing
Six major data breaches spanning North America dominated Q2–Q3 2026, exposing over 100 million records across healthcare, insurance, identity verification, and payment platforms. Social engineering and third-party compromise remain the primary attack vectors.
Conduent healthcare records breach affects 62.2 million across US states
Ransomware attack via SafePay group exposed 8.5 terabytes of Medicaid claims and HR data from October 2024 to January 2025, affecting 30+ US states.
What it means: Third-largest healthcare breach in US history; high risk of identity theft for individuals on public benefits.
IDScan.net identity verification breach exposes 153 million driver licenses globally including North American citizens
Unauthorized party accessed cloud-stored identity documents including high-resolution driver license images from US and Canadian citizens; data sold on dark web.
What it means: Catastrophic credential exposure affecting celebrities, politicians, law enforcement—enables sophisticated identity fraud and counterintelligence risk.
Canvas learning platform breach impacts 275 million students including Canadians
Attack on widely-used learning management system affected educational institutions across US, UK, Canada, Australia, and other nations.
What it means: Largest single breach of 2026; exposed academic records, credentials, and personal information of students and educators globally.
Charter Communications customer data breach leaks 40 million records
Extortion group stole customer personal information and published records on leak site.
What it means: Major telecommunications provider exposing subscriber data to fraudsters; high identity theft risk.
AssuranceAmerica driver license breach exposes 6.9 million customers
Hackers used voice phishing to compromise employee credentials and steal personal information and driver license numbers via single sign-on breach.
What it means: Largest American driver license data breach in 2026; enables fraudulent licensing and vehicle registration.
Canada Life Salesforce breach exposes 70,000 customer records
ShinyHunters extortion group used single employee Salesforce account compromise to access customer personal and financial data.
What it means: Canadian insurer exposing verified customer records to identity fraud; supply-chain vulnerability via cloud CRM platform.