TL;DR: The latest data breaches we track in September 2026 include Revolut, Telus, CenterPoint Energy and the Florida DMV, and SpyCloud counts more than 11 billion exposed records in 2026 so far. Check whether your email was exposed, and treat any breach notice as unverified until you confirm it inside your own account. Free tool: Scan My Shadow's digital footprint checker at scanmyshadow.com/digital-footprint-checker.
👉 Check my digital footprint — free 30-second check →
This page collects the most recent data breaches we have covered, with a one-line summary and a link to the full write-up. We add new incidents as they are confirmed, so bookmark it if you follow data breach news.
Latest data breaches (September 2026)
- Revolut: customer data, including ID document copies, was handed to a third party using fraudulent government requests. Read the Revolut breach guide.
- Telus: a breach notice told some customers to ignore it; names, billing addresses and phone numbers were named as exposed. Telus breach email explained.
- CenterPoint Energy: an attacker claims millions of customer records from a US utility. What CenterPoint customers should do.
- Florida DMV: the DAVID driver database was accessed using improperly stored credentials. Florida DMV breach explained.
- City Relay (London): property key-code data may have been exposed. City Relay breach.
- Auto-IT (Australia): car dealers were listed by a ransomware group. Auto-IT ransomware.
- Spain: the first reported breach attributed to an AI agent. AI-agent breach in Spain.
Cybersecurity news this week: the pattern
SpyCloud reports nearly 2,000 confirmed breach sources in 2026 exposing more than 11 billion records, with roughly 70 percent of records containing no password. That shifts the risk from account takeover toward fraud and social engineering. It also links the ShinyHunters group to several large incidents, including Canvas/Instructure, DentaQuest, Exact Sciences and MSG Sports. See the biggest data breaches in history for context.
How to check if you were in a recent data breach
- Run a free email check at scanmyshadow.com/digital-footprint-checker or the email exposure check.
- Look at what was exposed: passwords need a reset, ID and address data needs identity protection steps.
- Read what a data breach actually is and what to do with a breach notification email.
What to do after any breach
- Change the password on the affected account and anywhere you reused it; see how to check if your password was leaked.
- Turn on two-factor authentication.
- If ID numbers or addresses leaked, freeze your credit and follow identity theft protection basics.
- Expect phishing that quotes the breach; see how to spot phishing.
Cybersecurity news today: latest cyber attack news
If you follow cyber security news today, the trend is clear: attackers go after third-party providers and public agencies, then extort or sell the data. Recent cyber news and news about cyber attacks mostly involve stolen customer records, credentials and ID documents. Most of it ends in phishing and social engineering. Data from infostealers also feeds this; see dark web monitoring and the wider picture in stay safe online tips. For UK readers, cybersecurity news UK coverage often follows the NCSC; for the latest cybersecurity news, check security vendors and your own bank or provider notices.
Cyber in the news: cybersec news and cyberspace news this week
Cybersec news, news cybersecurity feeds and cyberspace news all report the same wave: stolen customer data, ransomware and extortion. For news data breach coverage that tells you what to do, use the incident guides above; for cyber news today, security vendors and agencies publish daily updates.
FAQs
What is the most recent data breach?
The newest incidents we have covered in September 2026 are listed at the top of this page, including Revolut, Telus, CenterPoint Energy and the Florida DMV. We update the list as new breaches are confirmed.
Where can I find the latest data breaches and data breach news?
This page tracks the incidents we cover, and each entry links to a full guide. For technical detail, security vendors such as SpyCloud publish running counts of confirmed breaches.
How do I know if my data was in a recent data breach?
Check your email address with a breach lookup such as Have I Been Pwned or the free Scan My Shadow checker, and read any notice from the affected company by logging in to your own account rather than clicking email links.
What is the difference between a data breach and a leak?
A breach is unauthorized access to a system. A leak is data exposed without a break-in, such as an open database. Both can expose personal data.
Why do breach numbers keep growing?
More services hold more data, and criminal groups increasingly target third-party providers so one incident reaches many companies.
Where can I find cyber security news today?
Security vendors, national agencies such as CISA and the NCSC, and breach trackers publish daily updates. For consumer-focused summaries with what to do next, use this page and our linked breach guides.
What is the latest cybersecurity news this week?
The newest incidents we cover are listed above, including Revolut, Telus, CenterPoint Energy and the Florida DMV. Each links to a guide on what was exposed.
Is there news about cyber attacks affecting individuals?
Yes. Breaches of banks, utilities, government databases and dealer software regularly expose customer data, which then fuels fraud and phishing.
Before scammers use your details, see them first: check what is already public about you.
Curious what's already out there? Scan My Shadow checks a phone number and email across 1,500+ sources and sends a clear report — no guesswork, just facts. Start your scan.