--- title: "Ukraine Enters Global Top 6 for Data Breaches: 2.6 Million Accounts Compromised in a Quarter" description: "According to Surfshark, 121.8 million accounts were compromised globally in Q3 2026. Ukraine moved from 47th to 6th place, losing 2.6 million accounts in three months." date: 2026-11-05T08:21:50.434Z lang: en url: https://xab.info/en/posts/ukraine-top-6-data-breaches-2026 tags: [cybersecurity, data-breach, ukraine, surfshark, phishing, q3-2026, cert-ua] author: "Alexander Buran" publisher: "XAB.info" --- # Ukraine Enters Global Top 6 for Data Breaches: 2.6 Million Accounts Compromised in a Quarter ![Hacker in a mask and hoodie sitting in front of monitors with code and cyberattack map](https://xab.info/media/2026/11/05/ukraina-top-6-utechki-dannyh-2026/ukraina-top-6-utechki-dannyh-2026-1.webp) ## Key Points - 121.8 million accounts compromised globally in Q3 2026 (+13.2% compared to previous quarter) - Ukraine moved from 47th to 6th place globally: 2.6 million accounts lost in three months - UK became Europe's leader in absolute number of breaches — 5.8 million (+121.6%) - Estonia ranked first globally in breach density per 1,000 inhabitants - CERT-UA records massive phishing on Telegram and Signal; Microsoft confirms Ukraine's lead in cyberattacks in the region The analytics company Surfshark has released a quarterly report documenting a global rise in compromised online accounts. In the third quarter of 2026, more than 121.8 million accounts were compromised worldwide—a 13.2% increase compared to the second quarter of the same year. This trend confirms a persistent pattern: cybercriminals are increasingly targeting the server infrastructure of major services rather than end-user devices, making data breaches massive and nearly unavoidable for the end consumer. ### The UK: Epicenter of European Regression The sharpest negative shift was recorded in the UK, where the number of compromised accounts more than doubled to 5.8 million, a 121.6% increase from the previous quarter. This surge allowed the United Kingdom to overtake France and secure the top spot for total breaches among European countries. Experts attribute the spike to several major incidents involving cloud service providers serving the British market. ### Ukraine: From 47th to 6th Place Globally The most notable movement in the global ranking was shown by Ukraine, which jumped from 47th to 6th place in a single quarter. Over three months, 2.6 million Ukrainian accounts were compromised. According to Microsoft data, Ukraine has led the region in the number of cyberattacks for several quarters. The national CERT-UA service additionally reports massive phishing campaigns targeting Telegram and Signal users, creating an additional vector for credential compromise. ### Estonia: Leader in Breach Density When considering the metric per 1,000 residents rather than absolute numbers, Estonia ranked first globally, surpassing Australia, the USA, and the UK. The high level of societal digitalization and the concentration of IT infrastructure in a small-population country make density statistics particularly vulnerable to individual large-scale incidents. Nevertheless, this metric is most frequently used by regulators to assess the effectiveness of national cyber defense. ### Why VPNs Do Not Save You and What Users Should Do The key takeaway from the Surfshark report is that most massive breaches occur on company servers, not on end-user devices. This means that even premium VPN services cannot fully guarantee protection against data leaks, as the compromise happens on the service provider's side, not within the transmission channel. Under these circumstances, analysts recommend treating personal information as confidential and providing real data only on official resources; using pseudonyms, secondary email addresses, or email masking services for registration on less significant platforms; using reliable password managers so that a compromised access to one service does not expose the rest of your accounts; and subscribing to breach monitoring services for timely notification of new incidents. ### Context: The Gorbag Group and Attacks on Military and Officials The rise in breaches in Ukraine is happening against the backdrop of ongoing targeted operations by Russian hacker groups. Specifically, the activity of the Gorbag group, which specializes in stealing data from Ukrainian military and government officials, was previously documented. The combination of massive phishing campaigns, infrastructure attacks, and targeted compromises forms a multi-vector threat that, according to CERT-UA, cannot be neutralized solely through end-user security measures. ## Fact-Check & Sources - [Украина вошла в топ-6 стран по утечкам данных: сколько аккаунтов сломано](https://www.rbc.ua/ukr/news/ukrayina-uviyshla-top-6-krayin-vitokami-danih-1793866164.html) - Primary source. Figures (121.8M, +13.2%, 5.8M for UK, 2.6M for UA, rankings) are taken directly from the Surfshark report cited by RBC-Ukraine. Microsoft and CERT-UA data are mentioned as additional confirmations in the same text. ## FAQ ### How many accounts were compromised in Ukraine in the third quarter of 2026? According to the Surfshark report, 2.6 million accounts were compromised in Ukraine during Q3 2026, allowing the country to rise from 47th to 6th place in the global ranking. ### Which country became the European leader in the absolute number of breaches? The United Kingdom: the number of compromised accounts reached 5.8 million (a 121.6% increase), enabling it to overtake France and take first place in Europe. ### Why does a VPN not protect against data breaches? Most massive hacks occur on company servers, not on user devices. A VPN encrypts the transmission channel but cannot prevent data compromise on the service provider's end. ### What protection measures do experts recommend? Use pseudonyms and secondary emails for registration, apply password managers, avoid sharing real data on unofficial sites, and subscribe to breach monitoring services.