Global data breaches rise 13% in Q3 2026 as UK and Ukraine see sharp increases

Global surge and regional shifts

Surfshark’s latest data shows global data breaches climbed 13.2% in Q3 2026, exposing 121.8 million accounts worldwide. The increase reverses earlier trends, with Europe experiencing some of the most significant spikes.

The UK saw the most dramatic rise in Europe, with 5.8 million accounts breached—a 121.6% jump from the previous quarter—making it the continent’s most affected country. Ukraine also saw a sharp increase, moving from 47th to 6th place globally after 2.6 million accounts were compromised.

The US remained the hardest-hit country overall, accounting for 31% of all global breaches, or 38.1 million accounts. France, previously a hotspot, saw breaches decline from 19.7 million in Q2 to 2.4 million in Q3.

Extortion groups target government data

The report highlights attacks on UK government databases by the extortion group ExfilSquad. The group claimed to have stolen contact details for over 100,000 police officers and staff from the Police National Legal Database, as well as around 600,000 records from the Department for Education.

Tomas Stamulis, Surfshark’s Chief Security Officer, stated that stolen data often remains dormant for extended periods before criminals exploit it, a trend exacerbated by the increasing sophistication of extortion tactics.

Cyberattack risks in conflict zones

Microsoft’s 2026 Digital Defense Report identified Ukraine as Europe’s most targeted country for cyberattacks in the first half of the year, ranking third globally. While the report does not attribute the attacks to specific actors, the surge in breaches aligns with ongoing geopolitical tensions.

CERT-UA, Ukraine’s computer emergency response team, has previously linked cyber incidents to state-sponsored groups, though Surfshark’s Q3 data does not confirm such connections for these breaches.

What this means

Lazyfounder analysis — our interpretation, not reported fact.

The Q3 2026 surge in data breaches underscores the growing threat of cyberattacks, particularly for governments, critical infrastructure, and regions facing geopolitical instability. For founders and operators, the rise of extortion groups like ExfilSquad signals a shift toward highly targeted attacks on sensitive databases—including those held by public-sector partners or vendors. The UK’s spike in breaches, alongside Ukraine’s rapid ascent in global rankings, also highlights how quickly threat landscapes can evolve. Companies operating in or adjacent to high-risk regions must prioritize adaptive security measures to mitigate risks, especially if their supply chains or customer data intersect with government or institutional networks.

Key takeaways

• The 13.2% global increase in data breaches reflects a broader trend of escalating cyber threats, particularly in regions with geopolitical tensions or weak cybersecurity infrastructure.
• Extortion groups are increasingly targeting high-value databases, including those held by government agencies, creating risks for private-sector partners or vendors with access to similar data.
• Ukraine’s rise in breach rankings aligns with Microsoft’s findings on cyberattack frequency, suggesting that conflict zones may face prolonged or sophisticated threats.
• Companies in Europe or with operations in the UK must account for the country’s sudden vulnerability, as its regulatory environment or third-party risks could expose them to breaches.

Related on Lazyfounder

• Microsoft
• More technology news
• Russia mandates three-year data retention for Apple and Microsoft