Have I Been Pwned indexed 1 new breach on July 19, 2026, according to a fresh pull of the public breaches API. Combined, these listings cover 23,272,765 breached accounts worldwide.
The largest addition — Paidwork — accounts for 23,272,765 accounts in this batch. Figures are global credential-breach totals, not state-resident counts. See our live HIBP 2026 tracker for month-to-date charts.
July month-to-date now totals 5 HIBP listings covering 33,765,327 accounts indexed through July 19, 2026.
Breaches Added July 19, 2026
| Breach | Domain | Accounts | Breach Date |
|---|---|---|---|
| Paidwork | paidwork.com | 23,272,765 | March 29, 2026 |
HIBP indexes verified breaches after independent confirmation. A breach date reflects when the incident occurred; the added date reflects when HIBP made the listing searchable.
Across our breach trackers
Week-of refresh snapshot through July 19, 2026 (Texas / HHS / SEC / AG / HIBP datasets):
- Texas OAG — YTD 342 reports affecting 28,872,163 Texans (+15 reports / +4,010,539 Texans vs prior weekly baseline).
- HHS OCR — 2026 under-investigation view: 241 submissions covering 23,244,084 individuals.
- SEC Form 8-K — 14 Item 1.05 families YTD (18 raw filings; 31 cyber-related 8-Ks tracked) (+9 families vs prior weekly baseline).
- California AG — 300 notices YTD on the public list (no residents-affected counts published).
- Washington AG — 50 YTD reports affecting 549,632 Washingtonians.
- Have I Been Pwned — 68 2026-dated listings covering 241,759,960 accounts in our tracker.
Recent source roundups:
- Texas OAG — July 17, 2026
- California AG — July 17, 2026
- SEC Form 8-K — July 17, 2026
- HHS OCR — July 1, 2026
Full multi-source snapshot — including companies added this week with domains and audit scores: breach data week of July 19, 2026.
Independent Cybersecurity Audits
EmailMeNow domain audits on July 19, 2026 scored 1 filer domain in this batch. 1 of 1 show 15% Transport Security or below — a recurring gap that makes spoofed breach-notification email easier to deliver.
Pattern: Scores below the 100% ideal on identity or transport still leave room for spoofed incident-response email — even when website headers score higher.
| Organization | Domain | Overall | Identity | Transport | Website | Risk |
|---|---|---|---|---|---|---|
| Paidwork | paidwork.com | 67% | 60% | 15% | 92% | Above Average |
Audit links: paidwork.com
Related trackers
- Have I Been Pwned tracker
- All state AG trackers
- Breach monitoring guide
- Ransomware threat landscape
- Texas OAG YTD dashboard
- Washington healthcare breaches (2026)
- Washington law firm breaches (2026)
- CA July roundup
- TX July roundup
- WA May roundup
- TX Parks breach
- HIBP July roundup
- Breach data week (July)
- HHS OCR July roundup
- SEC 8-K July roundup