Disclosure tracker › Disclosures in 2026
Intelligence · Disclosure tracker
Disclosures in 2026
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,314
Disclosures in the tracker, all years
2,028
Of those, indexed in 2026
76
Added in October
22
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 20 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
4,007 results · Disclosures in 2026. Clear filters
Medium31 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
A security company’s systems were hacked after it installed a malicious Python package deployed by Claude.
The post Prompted by OpenAI Disclosure, Anthropic Finds Its Own Models Hacked 3 Organizations appeared first…
31 Jul 2026
Medium31 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Named CosmosEscape, the vulnerability exposed the primary key for Cosmos DB accounts, granting full read and write access.
The post Critical Flaw Led to Azure Cosmos DB Pwnage appeared first on SecurityWeek.
31 Jul 2026
Medium31 Jul 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
Less than two weeks after OpenAI disclosed that an experimental AI model breached Hugging Face during a cybersecurity evaluation, Anthropic has revealed that its own review uncovered three incidents in which Claude…
31 Jul 2026
High31 Jul 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
In March 2026, hackers stole personal, financial, and medical information from the company’s AWS environment.
The post CareCloud Data Breach Impacts Over 350,000 appeared first on SecurityWeek.
31 Jul 2026
Critical30 Jul 2026
A coordinated attack
Finance · 1,700 records
A coordinated cyberattack that targeted more than 30 Minnesota community water systems has alarmed industrial cybersecurity experts, not because it caused widespread disruption, but because it appears to represent the…
30 Jul 2026
Medium30 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
CISA is urging water and wastewater utilities to lock down internet-exposed controllers, days after intrusions hit dozens of Minnesota systems.
The post CISA Urges Water Sector to Protect OT After Coordinated Attacks…
30 Jul 2026
Medium30 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
In a filing for federal regulators, Massachusetts-based Analog Devices said intruders had exfiltrated data from its networks earlier this summer, but the scope of the incident is still under investigation.
30 Jul 2026
Medium30 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Residential security company Brinks Home has disclosed that hackers breached some of its systems and are threatening to leak allegedly stolen data.
30 Jul 2026
Critical30 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Cyberattack tools and infrastructure used by North Korea’s Lazarus Group appear to have been shared with ransomware criminals targeting South Korean organizations, further evidence of deepening entanglement between…
30 Jul 2026
Medium30 Jul 2026
Analog Devices
Sector not stated · Records not stated
American semiconductor company Analog Devices announced that an unauthorized party accessed some of its systems and exfiltrated certain files.
30 Jul 2026
Critical30 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Two years after a malware incident that was not handled in accordance with South Korea’s requirements, KT has been fined. Lee Jin-seok reports: KT has been fined more than 53.9 billion won [USD $37,630,484.43]…
30 Jul 2026
Medium30 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Hackers were detected on Analog Devices systems in June, and an investigation found that they stole files.
The post Semiconductor Firm Analog Devices Discloses Data Breach appeared first on SecurityWeek.
30 Jul 2026
Medium29 Jul 2026
OpenAI agent used
Sector not stated · Records not stated
In a new update, OpenAI says its AI models also used publicly exposed credentials to compromise accounts on four third-party services during the recent attack on Hugging Face, expanding the scope of the four-day…
29 Jul 2026
Medium29 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
The Minnesota IT Services (MNIT) agency activated its cybersecurity incident response capabilities across the entire state after hackers targeted more than 30 community water systems in "a coordinated cyberattack."
29 Jul 2026
Medium29 Jul 2026
A coordinated cyberattack
Government · Records not stated
A coordinated cyberattack targeted operational technology at more than 30 Minnesota community water systems on July 26 and 27, triggering a statewide cybersecurity response.
Braham, Plymouth, South St. Paul and Maple…
29 Jul 2026
Critical29 Jul 2026
Cyberattack
Sector not stated · Records not stated
Angola’s largest telecommunications operator, Unitel, was hit by a cyberattack that has left millions of people nationwide without voice services, mobile data, and internet access.
29 Jul 2026
Critical29 Jul 2026
IBM Cost of a Data Breach Report
Sector not stated · Records not stated
IBM Cost of a Data Breach Report warns that the global average cost of a data breach has reached a record high of $4.99m, and AI-backed attacks have played a role
29 Jul 2026
Medium29 Jul 2026
OpenAI on Tuesday
Sector not stated · Records not stated
OpenAI on Tuesday revealed the rogue artificial intelligence (AI) agent that escaped its sealed evaluation environment and broke into Hugging Face's production environment, and also hacked multiple third-party accounts…
29 Jul 2026
Medium28 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Lots of Internet-exposed server management controllers are subject to offline password-cracking attacks, and adversaries have taken note.
28 Jul 2026
Medium28 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The U.S. and Australian governments have released new guidance urging critical infrastructure organizations to prepare to isolate vital operational technology systems in the event of a cyberattack or other major…
28 Jul 2026
Medium28 Jul 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
EY confirmed the theft of client tax documents from its third-party support platform. ShinyHunters claims responsibility and is threatening to publish the data.
28 Jul 2026
Medium28 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
More than 24,000 internet-exposed servers are leaking authentication password hashes due to a 20-year-old vulnerability in their Baseboard Management Controller (BMC) interface.
28 Jul 2026
Critical28 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Coca Cola claims data was stolen from its Fairlife business after a recent ransomware attack
28 Jul 2026
High28 Jul 2026
Houston City College
Education · 831,642 records
831,642 records exposed, Academic records, Citizenship statuses, Dates of birth, Email addresses and 4 more
28 Jul 2026
Were you affected?