Disclosure tracker › Disclosures in 2026
Intelligence · Disclosure tracker
Disclosures in 2026
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,306
Disclosures in the tracker, all years
2,020
Of those, indexed in 2026
69
Added in October
19
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 20 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
3,996 results · Disclosures in 2026. Clear filters
Critical8 Jul 2026
One Medical Seniors
Healthcare · 830,000 records
Clinical and demographic records of 830K patients exposed
8 Jul 2026
High8 Jul 2026
Chemco Calgary
Sector not stated · Records not stated
Ransomware attack by Qilin group ongoing
8 Jul 2026
High8 Jul 2026
8 Jul 2026
High8 Jul 2026
8 Jul 2026
Critical8 Jul 2026
NYC Health and Hospitals
Healthcare · 1,800,000 records
1.8M records with biometrics and SSNs breached
8 Jul 2026
Critical8 Jul 2026
Nissan North America
Sector not stated · Records not stated
Employee SSNs and bank data stolen via PeopleSoft
8 Jul 2026
Critical8 Jul 2026
8 Jul 2026
Critical8 Jul 2026
8 Jul 2026
Critical8 Jul 2026
HSIN security network
Government · Records not stated
HSIN security network breached, data exfiltrated
8 Jul 2026
Critical8 Jul 2026
8 Jul 2026
Medium7 Jul 2026
Chase Jordan
Government · Records not stated
Chase Jordan reports an update in the litigation stemming from a 2024 breach by Hunters International. This case has raised a number of issues about standing and negligence and has been up and down in the courts, with…
7 Jul 2026
Medium7 Jul 2026
KIRO7
Healthcare · 8,600 records
KIRO7 reports: The Washington Department of Social and Health Services (DSHS) is issuing a notice of a massive data breach that happened in March, potentially compromising the personal data of around 8,600 people. An…
7 Jul 2026
Critical7 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
The alleged victim, believed to be a small Ohio county, reportedly paid the extortion group to prevent the public release of sensitive stolen data.
The post County Government Reportedly Paid $1 Million to Cyber…
7 Jul 2026
Medium7 Jul 2026
Accenture
Sector not stated · Records not stated
IT services giant Accenture has confirmed it suffered a security breach after a threat actor claimed to have stolen 35 GB of source code and other data from the company.
7 Jul 2026
Critical6 Jul 2026
JadePuffer
Sector not stated · Records not stated
An "agentic threat actor" successfully exploited a Langflow flaw to steal data from a production database server and encrypt other systems.
6 Jul 2026
Critical6 Jul 2026
Carrie Tait
Legal · Records not stated
Carrie Tait reports: A retired lawyer is suing Alberta, its Chief Electoral Officer and two organizations that support secession for their respective roles in an alleged data breach affecting 2.9 million residents in…
6 Jul 2026
High4 Jul 2026
AdaptHealth
Healthcare · Records not stated
Connor Jones reports: AdaptHealth says attackers used social engineering to breach its systems and steal sensitive patient data, including passwords associated with insurance billing. The medical equipment company…
4 Jul 2026
Medium3 Jul 2026
A new report from the Citizen Lab has
Sector not stated · Records not stated
A new report from the Citizen Lab has revealed that former Member of the European Parliament Stelios Kouloglou had his mobile device repeatedly hacked with the notorious Pegasus spyware while serving on a committee…
3 Jul 2026
High3 Jul 2026
Moody Bible Institute
Finance · 2,303,416 records
2,303,416 records exposed, Dates of birth, Email addresses, Genders, Marital statuses and 3 more
3 Jul 2026
Critical2 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Security firm Sysdig says it has found what it believes is the first ransomware attack run from start to finish by an AI agent.
Its Threat Research Team calls the operator JADEPUFFER and says a large…
2 Jul 2026
Critical1 Jul 2026
GitHub
Technology · Records not stated
Over 543,000 valid credentials exposed in public repositories remained active despite security measures
1 Jul 2026
High1 Jul 2026
Ernst & Young
Finance · Records not stated
Sensitive client information exposed via third-party IT support platform compromise
1 Jul 2026
High1 Jul 2026
Department of Homeland Security
Government · Records not stated
Network intrusion on Homeland Security Information Network confirmed after twice being ruled false positive
1 Jul 2026
Critical1 Jul 2026
Accenture
Technology · Records not stated
Approximately 35 GB of Azure DevOps data stolen including source code, credentials, and sensitive client information
1 Jul 2026
Were you affected?