Home / Monthly reports / May 2026

Outages & Breaches: May 2026 in numbers

4 significant outages (1 critical) and 8 data breaches (5 critical) were logged in May 2026. The largest breach by records was Instructure (Canvas) (275M claimed). The longest outage with a known duration was AWS us-east-1 (28 hours). The most common outage cause was power (2 of 4).

Most significant incidents

• 28 May 2026Carnival breach exposes nearly 6 millionCarnival · breach · Unknown · 6M recordscritical
• 26 May 2026Charter confirms breach after extortion threatsCharter Communications · breach · ShinyHunters · 5M claimedcritical
• 18 May 2026NYC Health + Hospitals loses biometrics in vendor breachNYC Health + Hospitals · breach · Unknown · 1.8M recordscritical
• 12 May 2026Foxconn confirms attack after Apple and Nvidia data theft claimsFoxconn · breach · Nitrogencritical
• 7 May 2026AWS us-east-1 zone down 28 hours after cooling failureAWS us-east-1 · outage · Power / cooling · 28 hourscritical
• 3 May 2026Canvas maker Instructure breached, data on 275M users reportedInstructure (Canvas) · breach · ShinyHunters · 275M claimedcritical
• 29 May 2026Lightning knocks out power across two Azure West US 2 zonesMicrosoft Azure (West US 2) · outage · Power / cooling · 22.1 hoursmajor
• 25 May 2026Immigration software Docketwise exposes 143,000Docketwise · breach · Unknown · 143K recordsmajor

All 4 outages

• 29 May 2026Lightning knocks out power across two Azure West US 2 zonesMicrosoft Azure (West US 2) · outage · Power / cooling · 22.1 hoursmajor
• 19 May 2026Google Cloud wrongly suspends Railway's production accountRailway · outage · Provider error · 7.9 hoursmajor
• 7 May 2026AWS us-east-1 zone down 28 hours after cooling failureAWS us-east-1 · outage · Power / cooling · 28 hourscritical
• 5 May 2026Germany's .de domain DNS failsDENIC (.de) · outage · DNSmajor

All 8 data breaches

• 28 May 2026Carnival breach exposes nearly 6 millionCarnival · breach · Unknown · 6M recordscritical
• 26 May 2026Charter confirms breach after extortion threatsCharter Communications · breach · ShinyHunters · 5M claimedcritical
• 25 May 2026Immigration software Docketwise exposes 143,000Docketwise · breach · Unknown · 143K recordsmajor
• 18 May 2026NYC Health + Hospitals loses biometrics in vendor breachNYC Health + Hospitals · breach · Unknown · 1.8M recordscritical
• 12 May 2026Foxconn confirms attack after Apple and Nvidia data theft claimsFoxconn · breach · Nitrogencritical
• 8 May 2026Zara third-party database exposes 197,000 customersZara (Inditex) · breach · Unknown · 197K recordsminor
• 5 May 2026Vimeo user data exposed via analytics providerVimeo · breach · ShinyHunters · 119K recordsminor
• 3 May 2026Canvas maker Instructure breached, data on 275M users reportedInstructure (Canvas) · breach · ShinyHunters · 275M claimedcritical