Disclosure tracker › Disclosures in 2026
Intelligence · Disclosure tracker
Disclosures in 2026
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,302
Disclosures in the tracker, all years
2,017
Of those, indexed in 2026
68
Added in October
18
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 20 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
3,995 results · Disclosures in 2026. Clear filters
Critical5 Aug 2026
Basic-Fit Gym Operator
Sector not stated · Records not stated
1M members bank and personal data breached
5 Aug 2026
Critical5 Aug 2026
Paidwork Gig Platform
Technology · 23,300,000 records
23.3M accounts with bank details leaked
5 Aug 2026
Critical5 Aug 2026
CareCloud Health Tech
Healthcare · 350,000 records
350K patient medical and financial records exposed
5 Aug 2026
Critical5 Aug 2026
Suno AI Music
Technology · 55,300,000 records
55.3M accounts leaked with partial payment data
5 Aug 2026
Critical5 Aug 2026
5 Aug 2026
High5 Aug 2026
Cookeville Regional Medical Center
Healthcare · 330,000 records
330K patient records exposed in ransomware attack
5 Aug 2026
Medium5 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
3 Paperclip flaws exposed data & allowed unauthenticated command execution in two deployment modes
5 Aug 2026
Medium5 Aug 2026
Dutch retailer De Bijenkorf
Sector not stated · Records not stated
Amsterdam-based luxury goods chain De Bijenkorf is the latest retailer to announce a cyber incident involving a third-party logistics provider.
5 Aug 2026
Critical5 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
I was mapping the command-and-control infrastructure behind a state-linked intrusion set when the query came back and effectively ended the exercise I thought I was running.
The malware resolved its C2 address by…
5 Aug 2026
High5 Aug 2026
Organisation not named
Healthcare · 102,215 records
The disclosure as indexed does not name the organisation.
Brazil's SISVISA health surveillance system left 102,215 files totaling 79GB open online, including tax IDs and identity documents, without password protection.
5 Aug 2026
Critical5 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Unitel, Angola's dominant mobile operator, continues to recover from a cyberattack that caused outages the day of the government-owned telco's public offering.
5 Aug 2026
Medium4 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
The UK’s Police National Legal Database and Ask the Police service have been breached
4 Aug 2026
Medium4 Aug 2026
Swiss federal IT office
Government · 200 records
SwissInfo.ch reports: Following a cyberattack on the SharePoint servers operated by the Federal Office of Information Technology, Systems and Telecommunication (FOITT), access via the internet has been blocked for…
4 Aug 2026
Medium4 Aug 2026
Swiss IT agency
Government · Records not stated
The Federal Office for Information Technology and Communications (BIT) said specialists detected anomalies in on-premises Microsoft servers. The Swiss agency could not confirm exactly how the hackers got in.
4 Aug 2026
Medium4 Aug 2026
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Reports said intruders appeared to gain access to the Jira environment and other sensitive data of the Żabka retail chain. The company confirmed an intrusion occurred in late July.
4 Aug 2026
Medium3 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
A hacker has drained nearly $89m from Coldcard Bitcoin wallets after exploiting a legacy bug
3 Aug 2026
Critical3 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
The Police National Legal Database (PNLD) has confirmed that police, government and customer contact information was compromised and published on the dark web.
The data included names, organisations and work email…
3 Aug 2026
Medium3 Aug 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
An unknown Chinese-speaking threat actor has been observed running a campaign targeting Apple iOS devices by leveraging a publicly leaked version of the DarkSword exploit kit.
Attack surface management platform Censys…
3 Aug 2026
Critical3 Aug 2026
Cyberattack
Government · 31,000 records
DPA reports: The tiny principality of Liechtenstein has fallen victim to a major cyberattack in which the data of 31,000 people were stolen, the government said on Sunday. The country, which lies between Switzerland…
3 Aug 2026
Medium3 Aug 2026
Bill Curtis
Government · Records not stated
Bill Curtis reports: The full names and contact details for more than 100,000 police officers and staff have been leaked on the dark web after a hack, The Times can reveal. As part of a major security breach, hackers…
3 Aug 2026
Critical3 Aug 2026
The Herald Business
Sector not stated · 4,620,000 records
The Herald Business reports: Seoul Facilities Corp. has drawn criticism over its plan to offer 5,000 won [$3.50 USD] per affected user in response to a personal data breach involving about 4.62 million people, with…
3 Aug 2026
Medium3 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Fake Xeno Executor installers are infecting unsuspecting Roblox players with malware that provides remote access and steals sensitive information.
3 Aug 2026
Medium3 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
A cyberattack on the U.K.'s Police National Legal Database (PNLD) has compromised contact data of more than 100,000 police officers and other criminal justice professionals.
3 Aug 2026
Medium2 Aug 2026
Abbey Nutter
Education · Records not stated
Abbey Nutter reports: Sumner County Schools is still working through a reported network breach that forced the district to delay the start of the 2026-27 school year, officials told Main Street Media. The district…
2 Aug 2026
Were you affected?