Osegi
Security·2 min read

France Drops to 7th in Global Data Breach Ranking, Surfshark Says

Surfshark data shows 2.4 million French accounts were breached in Q3 2026, an 85% drop that takes France out of the global top 3, though 18 accounts are still hit every minute.

Digital padlock over a map of France symbolizing data breaches and compromised online accounts
Image: 01net.com

France has fallen out of the top three countries for data breaches. According to a new study by VPN provider Surfshark, 2.4 million French accounts were compromised between July and September 2026, placing the country 7th worldwide. That works out to 18 accounts breached every minute.

A sharp quarterly drop

The number of compromised French accounts fell by more than 85% compared with the previous quarter. At the start of the year, France ranked second behind the United States, with 23.5 million accounts exposed in a single quarter. Over the whole of last year, 40.3 million French accounts were breached, and in Q3 2024 the figure stood at 17.2 million.

Surfshark cautions that the lull does not mean the threat has gone away. Stolen data can sit unused for months before criminals exploit it. "While major incidents often attract public attention, large amounts of stolen information remain hidden for long periods while cybercriminals wait for the right moment to use it," said Tomas Stamulis, Surfshark's chief security officer.

A different picture worldwide

Globally, breaches rose 13.2% over the summer, with 121.8 million accounts compromised. The United States remains by far the most affected country, with 38.1 million accounts, close to 31% of the total.

In Europe, the United Kingdom now leads, with 5.8 million compromised accounts, up 121.6%, which lifts it to 3rd place worldwide. Ukraine jumped from 47th to 6th with 2.6 million accounts affected. Relative to population, Estonia is worst off, with 118 compromised accounts per 1,000 inhabitants.

France is unlikely to enjoy the respite for long. Recent weeks brought a string of incidents: a breach at AP-HP, the country's largest university hospital system; attacks on the Grand Orient de France and the French shooting federation, with data on more than 500,000 people stolen; roughly 230,000 customer accounts exposed at Strasbourg's transport company; and the theft of 14 million license plates from Auto-Planning, a booking provider for technical inspection centers. The fourth-quarter tally could look very different.

Apps worth a look

SUMO: the number puzzle

Tap the right tiles, add them up, hit the target. Easy to learn, hard to master. Free, for all ages.

Tags:surfsharkdata breachfrancecybersecurityaccount leaks

More from this day

See all →

More in: Security

See all →