Home / Monthly reports / September 2026
Outages & Breaches: September 2026 in numbers
5 significant outages (0 critical) and 9 data breaches (9 critical) were logged in September 2026. The largest breach by records was Vietnam APIS (220M). The longest outage with a known duration was Azure Sweden Central (5.9 hours). The most common outage cause was software bug (2 of 5).
Outages5▲ 2 vs August
Critical outages0wide impact
Downtime tracked22 hacross 5 outages with a known duration
Breaches9▲ 2 vs August
Critical breaches9sensitive data at scale
Records exposed267Mconfirmed or company-reported
Further claimed183Mattacker claims, unverified
Outage causes
Named attackers
Most significant incidents
- 30 Sep 2026Pentagon personnel system breach exposes 3 millionUS DoD (DMDC) · breach · Unknown · 3.1M records
- 30 Sep 2026Times Car Rental breach hits 6.6 million accountsTimes Car Rental · breach · Unknown · 6.6M records
- 24 Sep 2026Bitget hack steals $387.5M in cryptoBitget · breach · Suspected North Korea
- 18 Sep 2026Gyazo breach exposes 23.6 million usersGyazo · breach · Unknown · 23.6M records
- 10 Sep 2026IDScan driver's licence records stolen, 150M+ reportedIDScan · breach · Unknown · 150M claimed
- 10 Sep 2026AdaptHealth breach affects 4.1 millionAdaptHealth · breach · Unknown · 4.1M records
- 8 Sep 2026Misconfigured database exposes 220 million airline passenger recordsVietnam APIS · breach · None (exposure) · 220M records
- 7 Sep 202632.8 million Condé Nast user records offered for saleCondé Nast · breach · Unknown · 32.8M claimed
All 5 outages
- 30 Sep 2026Azure gateway change overloads during OS servicingMicrosoft Azure (multi-region) · outage · Configuration change · 5.8 hours
- 29 Sep 2026Azure OpenAI and Foundry fail in Sweden CentralAzure Sweden Central · outage · Software bug · 5.9 hours
- 22 Sep 2026Cloudflare Los Angeles nodes fail for an hourCloudflare · outage · Network · 1 hours
- 16 Sep 2026Salesforce errors and timeouts worldwideSalesforce · outage · Software bug · 4.7 hours
- 1 Sep 2026Fibre cables unplugged by mistake isolate two Google Cloud zonesGoogle Cloud us-central1 · outage · Human error · 4.2 hours
All 9 data breaches
- 30 Sep 2026Pentagon personnel system breach exposes 3 millionUS DoD (DMDC) · breach · Unknown · 3.1M records
- 30 Sep 2026Times Car Rental breach hits 6.6 million accountsTimes Car Rental · breach · Unknown · 6.6M records
- 24 Sep 2026Bitget hack steals $387.5M in cryptoBitget · breach · Suspected North Korea
- 18 Sep 2026Gyazo breach exposes 23.6 million usersGyazo · breach · Unknown · 23.6M records
- 10 Sep 2026IDScan driver's licence records stolen, 150M+ reportedIDScan · breach · Unknown · 150M claimed
- 10 Sep 2026AdaptHealth breach affects 4.1 millionAdaptHealth · breach · Unknown · 4.1M records
- 8 Sep 2026Misconfigured database exposes 220 million airline passenger recordsVietnam APIS · breach · None (exposure) · 220M records
- 7 Sep 202632.8 million Condé Nast user records offered for saleCondé Nast · breach · Unknown · 32.8M claimed
- 1 Sep 2026Aesto Health AWS intrusion exposes 9.5 millionAesto Health · breach · Unknown · 9.5M records
2026 year to date
Incidents YTD99January to September 2026
Outages YTD33significant outages
Breaches YTD66data breaches
Critical YTD49outages and breaches
Records exposed YTD539Mconfirmed or company-reported
| Month | Outages | Breaches | Critical | Running total |
|---|---|---|---|---|
| Jan | 3 | 7 | 5 | 10 |
| Feb | 6 | 7 | 5 | 23 |
| Mar | 2 | 7 | 5 | 32 |
| Apr | 3 | 7 | 4 | 42 |
| May | 4 | 8 | 6 | 54 |
| Jun | 2 | 7 | 4 | 63 |
| Jul | 5 | 7 | 5 | 75 |
| Aug | 3 | 7 | 6 | 85 |
| Sep | 5 | 9 | 9 | 99 |
| Total | 33 | 66 | 49 | 99 |
Cite this
Nuffield Consulting, “Outages & Breaches: September 2026 in numbers”, The Daily Tech Wire,published September 2026. https://techwire.nuffieldconsulting.com/reports/2026-09/ (retrieved 15 Nov 2026).
The underlying data for every month is in the CSV download.