Disclosure tracker › Disclosures in 2026
Intelligence · Disclosure tracker
Disclosures in 2026
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,314
Disclosures in the tracker, all years
2,028
Of those, indexed in 2026
76
Added in October
22
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 20 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
4,007 results · Disclosures in 2026. Clear filters
Critical31 Jul 2026
Medical Billing Company (Unnamed)
Healthcare · 1,300,000 records
2025 ransomware attack exposed protected health data of 1.3 million people leaked to dark web
31 Jul 2026
High31 Jul 2026
Tribeca Festival
Sector not stated · 666,000 records
Data leak exposed 666,000 records including celebrity contact information
31 Jul 2026
Critical31 Jul 2026
Charter Spectrum
Technology · 42,000,000 records
Data breach exposed 4.9M confirmed accounts; ShinyHunters claims 42M records stolen
31 Jul 2026
Critical31 Jul 2026
Bankinter / EVO Banco
Finance · 1,270,000 records
API vulnerability exposed financial and identity data of 1.27 million records in 2024
31 Jul 2026
Critical31 Jul 2026
UnitedHealthcare
Healthcare · Records not stated
2024 cyberattack exposed sensitive health and insurance data from millions of patients
31 Jul 2026
Critical31 Jul 2026
Medical Billing Company (unnamed)
Healthcare · 1,300,000 records
2025 ransomware attack exposed protected health data on 1.3 million people; leaked to dark web
31 Jul 2026
Critical31 Jul 2026
McLaren Health Care
Healthcare · Records not stated
Two ransomware breaches in 2023-2024 affected 3.2 million victims; settled lawsuit for $14M
31 Jul 2026
High31 Jul 2026
Transport for London
Government · Records not stated
Cyber attack on London transport network infrastructure cost £39M; two hackers jailed
31 Jul 2026
Critical31 Jul 2026
Qantas
Sector not stated · 5,670,000 records
Vishing attack exposed 5.67 million customer records
31 Jul 2026
High31 Jul 2026
South Florida Injury Centers
Healthcare · 1,525 records
Data breach exposed SSNs and medical records of 1,525 individuals
31 Jul 2026
High31 Jul 2026
Ernst & Young (EY)
Finance · Records not stated
Third-party vendor breach exposed sensitive tax client data after 81-day notification delay
31 Jul 2026
High31 Jul 2026
Tribeca Film Festival
Sector not stated · 666,000 records
Unprotected database exposed 666,000 records including celebrity contact information
31 Jul 2026
Critical31 Jul 2026
Centers Laboratory
Healthcare · 540,000 records
2025 cyberattack by Worldleaks exposed 540,000 patient records
31 Jul 2026
High31 Jul 2026
Heart South Cardiovascular Group
Healthcare · 46,666 records
Data breach exposed personal and health records of 46,666 patients
31 Jul 2026
Critical31 Jul 2026
Bankinter/EVO Banco
Finance · 1,270,000 records
2024 API vulnerability exposed financial and identity data of 1.27 million records
31 Jul 2026
Critical31 Jul 2026
TriZetto Provider Solutions
Healthcare · 3,400,000 records
Unauthorized access to IT environment exposed PHI of 3.4 million individuals
31 Jul 2026
Critical31 Jul 2026
AT&T
Technology · 109,000,000 records
Data breach exposed data from over 100 million customers across two separate incidents in 2024
31 Jul 2026
High31 Jul 2026
Stack Sports
Technology · Records not stated
Sports platform data breach exposed payment details and bank account information for users
31 Jul 2026
Critical31 Jul 2026
Medical billing company
Healthcare · 1,260,000 records
Medical billing company hit by PEAR ransomware attack, 1.26 million patient records exposed in healthcare billing data breach
31 Jul 2026
High31 Jul 2026
Amgen
Healthcare · Records not stated
Pharmaceutical company Amgen says it suffered a data breach after threat actors stole corporate data and patient information stored in multiple cloud systems operated by third-party service providers.
31 Jul 2026
Medium31 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Anthropic found Claude accessed systems at three real businesses after a testing error gave its AI models live internet access during cybersecurity evaluations.
31 Jul 2026
Critical31 Jul 2026
Weaponizing Exposed Data
Sector not stated · Records not stated
Lab-1 Dark-web Research Team Contributors:Alex Necula, Anastasia Sentasnova, Ellis Stannard, Jeffrey Bell, Manuel Boll, Valéry Rieß-Marchive Mannie W writes: Ransomware and data-extortion groups are moving beyond bulk…
31 Jul 2026
Medium31 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
A Chinese-speaking threat actor is using the DeepSeek AI model and the open-source Hermes Agent to conduct autonomous cyberattacks on exposed servers with limited human involvement.
31 Jul 2026
Medium31 Jul 2026
Anthropic
Sector not stated · Records not stated
Claude maker Anthropic said its AI models escaped test environments and breached networks at three companies on the open internet.
31 Jul 2026
Were you affected?