Home / Monthly reports / November 2026

Outages & Breaches: November 2026 in numbers (to date)

22 significant outages (5 critical) and 45 data breaches (5 critical) were logged in November 2026 (to date). The largest breach by records was CSCTelecom (125M). The longest outage with a known duration was Microsoft 365 (Exchange Online / Outlook) (36 hours). The most common outage cause was unknown (6 of 22). 9 of the incidents mainly affected the UK. This month is still in progress, so figures will change as incidents are added.

Most significant incidents

• 13 Nov 2026FAA nationwide ground stop blamed on contractor's network upgradeFAA air traffic control (US) · outage · Configuration change · 4.4 hourscritical
• 12 Nov 2026Microsoft 365 outage resolved after more than 36 hoursMicrosoft 365 (Exchange Online / Outlook) · outage · Configuration change · 36 hourscritical
• 11 Nov 2026Baltic SMS provider left 125M messages exposedCSCTelecom · breach · Unknown · 125M recordscritical
• 9 Nov 2026N-able upgrades hosted N-central after taking it offline worldwideN-able N-central · outage · Cyberattack · 35 hourscritical
• 9 Nov 2026Russian host Beget rebuilds infrastructure after wiper attackBeget · outage · Cyberattackcritical
• 9 Nov 2026Nitori warns 37.62m customer records may have leakedNitori · breach · Unknown · 37.6M recordscritical
• 9 Nov 2026Frontline Education breach total rises to over 3 millionFrontline Education · breach · Unknown · 3.1M recordscritical
• 7 Nov 2026Crédit Mutuel Arkéa hit via a service providerCrédit Mutuel Arkéa · breach · Unknowncritical

All 22 outages

• 13 Nov 2026Workday outage after disaster-recovery test hits productionWorkday · outage · Configuration change · 18.5 hoursmajor
• 13 Nov 2026National Weather Service websites hit by communications problemsUS National Weather Service · outage · Unknown · 4 hoursminor
• 13 Nov 2026FAA nationwide ground stop blamed on contractor's network upgradeFAA air traffic control (US) · outage · Configuration change · 4.4 hourscritical
• 12 Nov 2026Yandex Cloud says drone strikes on data centres caused permanent data lossYandex Cloud · outage · Physical damage / conflictmajor
• 12 Nov 2026Bundeswehr grounds Quantum Systems drones after update-server hackQuantum Systems drones (Bundeswehr) · outage · Cyberattackmajor
• 12 Nov 2026Microsoft 365 outage resolved after more than 36 hoursMicrosoft 365 (Exchange Online / Outlook) · outage · Configuration change · 36 hourscritical
• 11 Nov 2026NTT Docomo 5G standalone network fails nationwide for second time in a weekNTT Docomo 5G SA · outage · Capacity · 9 hoursmajor
• 11 Nov 2026Poland takes ePUAP government services platform offline after cyberattackePUAP (Poland) · outage · Cyberattackmajor
• 11 Nov 2026Canonical web services knocked offline before Ubuntu SummitCanonical / Ubuntu online services · outage · Unknown · 7.5 hoursmajor
• 10 Nov 2026Virgin Media disables Hub 4 router admin access while it patches a flawVirgin Media Hub 4 · outage · Software bugUKminor
• 10 Nov 2026Apple iCloud outage disrupts Mail, Calendar and ContactsApple iCloud · outage · Unknown · 3 hoursmajor
• 9 Nov 2026N-able upgrades hosted N-central after taking it offline worldwideN-able N-central · outage · Cyberattack · 35 hourscritical
• 9 Nov 2026Lloyds, Halifax and Bank of Scotland apps hit by login problemsLloyds Banking Group apps · outage · UnknownUKminor
• 9 Nov 2026Russian host Beget rebuilds infrastructure after wiper attackBeget · outage · Cyberattackcritical
• 6 Nov 2026Veeam Software Appliance VMs fail to boot on AMD EPYC hostsVeeam Software Appliance · outage · Software bugminor
• 6 Nov 2026System failure halts transactions at 128 Shinkin banks in western JapanShinkin banking network (Japan) · outage · Unknownmajor
• 6 Nov 2026Chainalysis begins restoring screening tools after breachChainalysis · outage · Cyberattackcritical
• 5 Nov 2026Cable theft cuts Openreach broadband and phones across BedfordshireOpenreach (Bedfordshire) · outage · Physical damage / conflictUKminor
• 4 Nov 2026Deutsche Telekom broadband, mobile and email disrupted across GermanyDeutsche Telekom / T-Online · outage · Unknown · 14 hoursmajor
• 3 Nov 2026Supermarket fridge cyberattacks reach UK meat suppliersRefrigeration controls (UK meat suppliers) · outage · CyberattackUKmajor
• 2 Nov 2026Hour-long power and internet cut hits MorpethMorpeth power and broadband · outage · Power / fire · 1 hoursUKminor
• 1 Nov 2026Tier 1 carrier Arelion outage hits US customersArelion · outage · Networkminor

All 45 data breaches

• 13 Nov 2026UT Arlington confirms data theft as Qilin claims attackUniversity of Texas at Arlington · breach · Qilinmajor
• 13 Nov 2026UCHealth notifies 129,000 people after email account breachUCHealth · breach · Unknown · 129K recordsmajor
• 13 Nov 2026Uber says hackers stole drivers' licence data via AI vendor FireworksUber · breach · Unknownmajor
• 13 Nov 2026Glucose-monitor maker Dexcom files breach notice in CaliforniaDexcom · breach · Unknownmajor
• 13 Nov 2026Cursor breach via Fireworks key led to malicious Claude Code extension buildsCursor (Anysphere) · breach · Unknownmajor
• 13 Nov 2026Osaka says over 1M email addresses exposed via hacked mail vendorCity of Osaka · breach · Unknown · 1M recordsmajor
• 12 Nov 2026TSMC says employee data leaked through a third-party cloud providerTSMC · breach · Unknown · 46K claimedmajor
• 12 Nov 2026Sogo Hong Kong says up to 820,000 loyalty members' data exposedSogo Hong Kong · breach · Unknown · 820K recordsmajor
• 12 Nov 2026Insider took data on 417,000 Premise Health patientsPremise Health · breach · Insider · 417K recordsmajor
• 12 Nov 2026Philippine privacy regulator reviewing breaches at 10 government agenciesPhilippine government agencies · breach · Unknownmajor
• 12 Nov 2026Fireworks AI hack exposed Notion AI chat transcriptsNotion · breach · Unknownmajor
• 12 Nov 2026ScreenConnect extension abused to breach nearly 50 organisationsConnectWise ScreenConnect · breach · Unknownmajor
• 12 Nov 2026Chainstack says AI-driven intrusion exposed customer dataChainstack · breach · Unknownmajor
• 12 Nov 2026Apify rotates API tokens and forces 2FA resets after breachApify · breach · Unknownmajor
• 11 Nov 2026Kazakhstan-linked hackers used AI agent to steal Tajik government filesTajik government · breach · Silent Lynxmajor
• 11 Nov 2026Maersk confirms breach of legacy LF Logistics systemMaersk · breach · WhiteArmor · 30K claimedmajor
• 11 Nov 2026Baltic SMS provider left 125M messages exposedCSCTelecom · breach · Unknown · 125M recordscritical
• 10 Nov 2026Qubole's AWS access abused to steal data from dozens of companiesQubole · breach · Unknownmajor
• 10 Nov 2026Stolen GitHub accounts push CI secret-stealer to 61,764 repositoriesGitHub users (compromised accounts) · breach · Unknownmajor
• 9 Nov 2026York University breach exposed personal details dating to 2007York University · breach · Unknownmajor
• 9 Nov 2026Vanderbilt University hit by ransomware, data theft claimedVanderbilt University · breach · Ransomware gang (BYOD)major
• 9 Nov 2026Technical University of Munich portal breach exposes user passwordsTechnical University of Munich · breach · Unknownmajor
• 9 Nov 2026SEGA says 2.2M email addresses leaked via newsletter vendorSEGA · breach · Unknown · 2.2M recordsminor
• 9 Nov 2026Revolve says 1.5 million shoppers hit by data breachRevolve · breach · Unknown · 1.5M recordsmajor
• 9 Nov 2026Nitori warns 37.62m customer records may have leakedNitori · breach · Unknown · 37.6M recordscritical
• 9 Nov 2026MS&AD insurers' breach total passes 1 million recordsMS&AD Insurance Group · breach · Unknown · 1M recordsmajor
• 9 Nov 2026Gibraltar government cloud network breached for weeksGovernment of Gibraltar · breach · Unknownmajor
• 9 Nov 2026Frontline Education breach total rises to over 3 millionFrontline Education · breach · Unknown · 3.1M recordscritical
• 9 Nov 2026Fireworks AI discloses second breach, via a cloud providerFireworks · breach · Unknownmajor
• 9 Nov 2026Amplifon Americas breach hits 1.3M peopleAmplifon Americas · breach · Unknown · 1.3M recordsmajor
• 8 Nov 2026Who Gives A Crap customers in UK, US and Australia exposed via marketing supplierWho Gives A Crap · breach · Unknownminor
• 8 Nov 2026Iris Ohyama cloud breach may expose 7.7M customersIris Ohyama · breach · Unknown · 7.7M recordsmajor
• 7 Nov 2026WorkOS breach blamed on AI hacking agent that escaped its sandboxWorkOS · breach · Researcher (ARTEX agent)major
• 7 Nov 2026Crédit Mutuel Arkéa hit via a service providerCrédit Mutuel Arkéa · breach · Unknowncritical
• 6 Nov 2026Wealth manager Saltus reportedly hit by cyber attackSaltus · breach · UnknownUKminor
• 6 Nov 2026Chainalysis says credentials and live tokens for all customers were exposedChainalysis · breach · Unknowncritical
• 5 Nov 2026Ransomware gang Whitearmor claims attack on UnileverUnilever · breach · WhitearmorUKmajor
• 5 Nov 2026Norway's aid agency Norad says grants portal attackers may have taken all user detailsNorad · breach · Unknown · 20.6K recordsmajor
• 5 Nov 2026Harvard alumni data added to Have I Been PwnedHarvard University · breach · Unknown · 851K recordsmajor
• 5 Nov 2026DigiCert breach exposes customer details and identity documentsDigiCert · breach · Unknownmajor
• 4 Nov 2026mSecure password manager users told to reset everythingmSecure · breach · Unknownmajor
• 4 Nov 2026DreamHost confirms theft of FTP logins and webmail sessionsDreamHost · breach · Unknownmajor
• 4 Nov 2026Data stolen from 39 Bristol schools leaked on the dark webBristol schools (Bristol City Council) · breach · UnknownUKmajor
• 3 Nov 20263AM ransomware affiliate hits a UK school estateUnnamed UK school estate · breach · 3AM ransomware affiliateUKminor
• 3 Nov 2026Hijacked cPGuard update backdoors nearly 3,000 Linux serversOpsShield (cPGuard) · breach · Unknownmajor