Data breach metrics
What our data breach reports show: how many leaks we report each month, how much data they claim to expose, and where the data is shared.
- Reports published
- 2,200
- In the last 12 months
- 87
- Shared on Telegram
- 71%
- Latest report
- September 18, 2026
Breach reports per month
Each bar is the number of leaks we reported that month. The peak was 263 reports in one month.
Show the numbers as a table
| Month | Reports |
|---|---|
| Jan 23 | 4 |
| Mar 23 | 2 |
| Apr 23 | 38 |
| May 23 | 32 |
| Jun 23 | 263 |
| Aug 23 | 24 |
| Sep 23 | 112 |
| Oct 23 | 261 |
| Nov 23 | 44 |
| Dec 23 | 70 |
| Jan 24 | 84 |
| Feb 24 | 169 |
| Mar 24 | 256 |
| Apr 24 | 149 |
| May 24 | 132 |
| Jun 24 | 182 |
| Jul 24 | 36 |
| Aug 24 | 15 |
| Sep 24 | 79 |
| Oct 24 | 41 |
| Jan 25 | 1 |
| Feb 25 | 1 |
| Mar 25 | 6 |
| Apr 25 | 13 |
| May 25 | 15 |
| Jun 25 | 16 |
| Jul 25 | 33 |
| Aug 25 | 23 |
| Sep 25 | 17 |
| Oct 25 | 5 |
| Nov 25 | 3 |
| Dec 25 | 3 |
| Jan 26 | 3 |
| Feb 26 | 2 |
| Mar 26 | 2 |
| Apr 26 | 1 |
| May 26 | 2 |
| Jun 26 | 2 |
| Jul 26 | 27 |
| Aug 26 | 30 |
| Sep 26 | 1 |
Data volume reported per year
The total size claimed in report titles, such as "1.07 GB data breach". Many reports give no size, so this is a floor, not a total.
- 20232,884 GB · 850 reports
- 20241,726 GB · 1,143 reports
- 20253,203 GB · 136 reports
- 2026532 GB · 70 reports
Where the leaks are shared
Share of reports that mention each channel or kind of leak. A report can mention several.
- Telegram channels71% · 1,551
- Stealer logs2% · 34
- Combolists19% · 421
- Ransomware groups2% · 51
- Hacker forums25% · 554
Latest breach reports
Open the data breach trackerDark web leak trends for the week
Affected Entity: L&P Aesthetics (fortheface.com) Leaked Volume: 121.53 GB Detection Date: September 2026 Incident Analysis The exposure of a massive repository belonging to the medical firm L&P Aesthetics on underground forums has been confirmed.
What Is Vulnerability Scanning and Why It Matters
Why would an organization rely on a quarterly or annual vulnerability check when attackers probe exposed systems continuously? That question exposes the central misunderstanding behind what vulnerability scanning is. A scan isn't a certificate that an environment is safe.
How to Find Leaked Passwords Before Attackers Do
Verizon's 2025 research found that compromised credentials were an initial access vector in 22% of reviewed breaches, while credential stuffing accounted for a median 19% of daily authentication attempts across identity-provider logs. The figure rose to 25% for enterprise-sized companies.
Online Brand Protection Guide for MSPs
In 2023, impersonation scams generated more than 330,000 business reports and nearly 160,000 government reports, with combined reported losses above $1.1 billion.
Social Media Impersonation: Risks, Detection, and Response
A customer messages the company's real Facebook page about a locked account. Within minutes, a helpful “support agent” replies from a lookalike profile, sends a verification link, and asks for information that seems routine.
These figures summarize reports of dark web activity. InsecureWeb makes no representations regarding the accuracy of the underlying data.
Find out what an attacker would find first
Create a free account, add your domain and see your leaked credentials, lookalike domains and exposed services. No card required.