Data source
Have I Been Pwned
Have I Been Pwned collects data breaches and lets people check whether they were affected. We count verified breaches from its public list, without fabricated breaches or spam lists, and publish no account data.
Supporting context; these measurements do not directly affect the score.
Breach data from Have I Been Pwned (haveibeenpwned.com). We count verified breaches and publish the results.
Verified breaches989
Last 12 months131
Previous 12 months94
Billion accounts13.2
What the data shows
Computed from every record, as of Oct 27, 2026.
- 131 verified breaches were added in the last 12 months against 94 in the 12 months before: up 39%.
- Breach counts and accounts move differently: 90 breaches with 2,849,713,686 accounts in 2025, 113 with 541,210,300 so far in 2026.
Added per year
| Year | Breaches | Accounts |
|---|---|---|
| 2019 | 80 | 2,827,856,179 |
| 2020 | 76 | 934,553,630 |
| 2021 | 73 | 1,232,773,564 |
| 2022 | 66 | 181,712,602 |
| 2023 | 92 | 762,325,896 |
| 2024 | 103 | 1,429,539,403 |
| 2025 | 90 | 2,849,713,686 |
| 2026 (to Oct 27, 2026) | 113 | 541,210,300 |
Limitations
- It only includes breaches that surfaced and were loaded, so it undercounts.
- We count by the date a breach was added, which can be years after it happened.
- A single huge breach can dominate the yearly account total.