Have I Been Pwned indexed 1 new breach on September 2, 2026, according to a fresh pull of the public breaches API. Combined, these listings cover 8,849,657 breached accounts worldwide.

The largest addition — Manchester Airports Group — accounts for 8,849,657 accounts in this batch. Figures are global credential-breach totals, not state-resident counts. See our live HIBP 2026 tracker for month-to-date charts.

September month-to-date now totals 2 HIBP listings covering 10,075,866 accounts indexed through September 2, 2026.

Breaches Added September 2, 2026

Breach	Domain	Accounts	Breach Date
Manchester Airports Group	`magairports.com`	8,849,657	August 27, 2026

HIBP indexes verified breaches after independent confirmation. A breach date reflects when the incident occurred; the added date reflects when HIBP made the listing searchable.

Multi-source context

This is the Have I Been Pwned source detail for September 2, 2026. It covers this source’s new listings only — not the multi-source week digest.

For multi-source YTD totals (not repeated here), see the breach trackers hub.

Other recent source roundups:

Independent Cybersecurity Audits

EmailMeNow domain audits on September 2, 2026 scored 1 filer domain in this batch. 1 of 1 show 15% Transport Security or below — a recurring gap that makes spoofed breach-notification email easier to deliver.

Pattern: Scores below the 100% ideal on identity or transport still leave room for spoofed incident-response email — even when website headers score higher.

Organization	Domain	Overall	Identity	Transport	Website	Risk
Manchester Airports Group	magairports.com	63%	90%	15%	37%	Above Average

Audit links: magairports.com

Source: Have I Been Pwned — Pwned Websites

1 New Breach Added to Have I Been Pwned on September 2, 2026: 8,849,657 Accounts

Breaches Added September 2, 2026

Multi-source context

Independent Cybersecurity Audits

Related trackers