Have I Been Pwned indexed 1 new breach on August 9, 2026, according to a fresh pull of the public breaches API. Combined, these listings cover 218,395 breached accounts worldwide.
The largest addition — Alcon — accounts for 218,395 accounts in this batch. Figures are global credential-breach totals, not state-resident counts. See our live HIBP 2026 tracker for month-to-date charts.
August month-to-date now totals 5 HIBP listings covering 12,961,550 accounts indexed through August 9, 2026.
Breaches Added August 9, 2026
| Breach | Domain | Accounts | Breach Date |
|---|---|---|---|
| Alcon | alcon.com | 218,395 | August 1, 2026 |
HIBP indexes verified breaches after independent confirmation. A breach date reflects when the incident occurred; the added date reflects when HIBP made the listing searchable.
Multi-source context
This is the Have I Been Pwned source detail for August 9, 2026. It covers this source’s new listings only — not the multi-source week digest.
For the combined Texas / HHS / SEC / AG / HIBP YTD snapshot, companies table, and cross-source audits, see Breach data week of August 9, 2026.
Other recent source roundups:
Independent Cybersecurity Audits
EmailMeNow domain audits on August 9, 2026 scored 1 filer domain in this batch. 1 of 1 show 15% Transport Security or below — a recurring gap that makes spoofed breach-notification email easier to deliver.
Pattern: Scores below the 100% ideal on identity or transport still leave room for spoofed incident-response email — even when website headers score higher.
| Organization | Domain | Overall | Identity | Transport | Website | Risk |
|---|---|---|---|---|---|---|
| Alcon | alcon.com | 59% | 40% | 15% | 90% | Average |
Audit links: alcon.com
Related trackers
- Have I Been Pwned tracker
- All state AG trackers
- Breach monitoring guide
- Ransomware threat landscape
- Texas OAG YTD dashboard
- Washington healthcare breaches (2026)
- Washington law firm breaches (2026)
- CA August roundup
- TX August roundup
- WA May roundup
- TX Parks breach
- HIBP August roundup
- Breach data week (August)
- HHS OCR July roundup
- SEC 8-K July roundup