Disclosure tracker › Disclosures in 2026
Intelligence · Disclosure tracker
Disclosures in 2026
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,305
Disclosures in the tracker, all years
2,019
Of those, indexed in 2026
66
Added in October
18
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 19 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
3,994 results · Disclosures in 2026. Clear filters
High11 Aug 2026
Clover Health
Healthcare · Records not stated
Health insurer data breach disclosed; type and extent of exposed data unknown at disclosure
11 Aug 2026
Critical11 Aug 2026
Ceva Logistics
Sector not stated · Records not stated
Shipping company data breach exposed personal data of customers across banks, retailers, and gamers
11 Aug 2026
Critical11 Aug 2026
100K+ officer contact records exfiltrated
Government · Records not stated
100K+ officer contact records exfiltrated
11 Aug 2026
Critical11 Aug 2026
AnMed Health System
Healthcare · Records not stated
83 facilities closed in ongoing ransomware attack
11 Aug 2026
Critical11 Aug 2026
Loyalist College Ontario
Education · Records not stated
Student and staff data stolen in ransomware
11 Aug 2026
Critical11 Aug 2026
CareCloud Health Platform
Healthcare · 345,000 records
345K patient SSNs and payment records stolen
11 Aug 2026
High11 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Hackers breached facility supplying heat to 50,000 residents via private APN
11 Aug 2026
High11 Aug 2026
Cerner
Healthcare · Records not stated
Patient data breach at healthcare systems affecting Huntsville Hospital Health System
11 Aug 2026
Critical11 Aug 2026
MCBS
Healthcare · 1,200,000 records
Medical business management company data breach exposed over 1.2 million individuals' records
11 Aug 2026
Critical11 Aug 2026
100K+ police officer contact records leaked
Government · Records not stated
100K+ police officer contact records leaked
11 Aug 2026
Critical11 Aug 2026
Snowflake Platform Breach
Technology · 165,000,000 records
165 orgs hit, billions of records stolen
11 Aug 2026
High11 Aug 2026
Barclay Damon Law Firm
Legal · Records not stated
Internal legal data exfiltrated by BusinessDataLeaks
11 Aug 2026
Critical11 Aug 2026
11 Aug 2026
Critical11 Aug 2026
Alcon Pharma
Healthcare · Records not stated
25M Salesforce PII records stolen by ShinyHunters
11 Aug 2026
Critical11 Aug 2026
Questal IT Services
Technology · Records not stated
21M Salesforce PII records stolen by ShinyHunters
11 Aug 2026
Critical11 Aug 2026
100K+ officer and staff contact records exposed
Government · Records not stated
100K+ officer and staff contact records exposed
11 Aug 2026
Critical11 Aug 2026
Canvas Instructure
Education · 275,000,000 records
275M users compromised across 8,800 institutions
11 Aug 2026
Medium10 Aug 2026
Organisation not named
Legal · Records not stated
The disclosure as indexed does not name the organisation.
Atlassian’s enterprise AI assistant Rovo, which is usually connected across sensitive work environments like Slack, Microsoft 365, and Google Workspace, was found vulnerable to data leaks through malicious instructions.
10 Aug 2026
Medium10 Aug 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
Three separate research efforts last week demonstrated ways to defeat passkey protections without breaking the cryptography they rest on.
Passkeys are designed to replace reusable passwords and resist phishing. The…
10 Aug 2026
Medium10 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The current GPT-5.6-Sol has been assigned a ‘high’ cybersecurity threshold, but Astra could reach the maximum ‘critical’ threshold.
The post OpenAI’s Upcoming Astra Model Raises Autonomous Cyberattack Concerns…
10 Aug 2026
Medium10 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The incident occurred on the same day as coordinated cyberattacks struck more than 30 other renewable energy installations and a larger heat plant, as Poland publicly disclosed in January.
10 Aug 2026
Critical10 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Breached via private APN; supplies heat to approximately 50,000 residents
10 Aug 2026
High10 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Heat and power facility supplying 50,000 residents breached via private APN exploitation
10 Aug 2026
High10 Aug 2026
7-Eleven
Retail · Records not stated
Data breach exposed current, former, and prospective franchisees' detailed application packages
10 Aug 2026
Were you affected?