Disclosure tracker › Disclosures in 2026
Intelligence · Disclosure tracker
Disclosures in 2026
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,307
Disclosures in the tracker, all years
2,021
Of those, indexed in 2026
71
Added in October
20
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 20 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
3,998 results · Disclosures in 2026. Clear filters
Critical11 Jul 2026
Daryna Antoniuk
Government · 6,000,000 records
Daryna Antoniuk reports: Dutch police said Thursday they had uncovered evidence suggesting that Dutch criminals were involved in the cyberattack on telecom provider Odido that exposed the personal data of more than 6…
11 Jul 2026
Critical11 Jul 2026
Brandon Richards
Legal · 2,400,000,000 records
Brandon Richards reports: California resident Sean Mortazi filed a class action lawsuit against TikTok Inc. on June 11, 2026, alleging a data breach exposed the personal data of more than 2.4 billion users worldwide.…
11 Jul 2026
Critical11 Jul 2026
Organisation not named
Legal · Records not stated
The disclosure as indexed does not name the organisation.
PORTLAND, Ore., An Armenian national extradited from Ukraine to the United States pleaded guilty yesterday for his role in Ryuk ransomware attacks and an extortion conspiracy targeting companies throughout the United…
11 Jul 2026
High11 Jul 2026
Glendale Community College
Education · 793,925 records
793,925 records exposed, Academic records, Dates of birth, Email addresses, Genders and 4 more
11 Jul 2026
Medium10 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
CISA reveals how it responded after sensitive AWS GovCloud credentials and internal data were exposed in a public GitHub repository
10 Jul 2026
Critical10 Jul 2026
Organisation not named
Sector not stated · 7,000,000 records
The disclosure as indexed does not name the organisation.
Other noteworthy stories that might have slipped under the radar: Abnormal AI sued by Anthropic, AssuranceAmerica data breach affects 7 million people, NSA brings back TAO.
The post In Other News: DHS Database Hacked…
10 Jul 2026
Medium10 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
A threat actor has been targeting organizations spanning multiple sectors with voice-based fake security requests that prompt Microsoft 365 users to enroll a new Entra passkey with an aim to carry out data extortion…
10 Jul 2026
Critical10 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
A cybercrime crew left one of its own servers wide open on the internet for three weeks, and it exposed the operation's inner workings: the hacking tools, the activity logs, and target lists naming more than 1.4…
10 Jul 2026
Critical9 Jul 2026
Organisation not named
Government · 6,000,000 records
The disclosure as indexed does not name the organisation.
Dutch police said Thursday they had uncovered evidence suggesting that Dutch criminals were involved in the cyberattack on telecom provider Odido that exposed the personal data of more than 6 million customers earlier…
9 Jul 2026
Critical9 Jul 2026
Data breach
Finance · 6,900,000 records
Hackers gained access to more than 6.9 million records at AssuranceAmerica by targeting a company employee.
9 Jul 2026
Medium9 Jul 2026
Darktrace
Sector not stated · Records not stated
Darktrace says a LiteLLM AI gateway linked to Amazon Bedrock was compromised for cryptomining after signs of exposed SSH activity.
9 Jul 2026
Medium9 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
A new data-extortion group called Helix is using identity-focused tactics such as voice phishing (vishing), device code phishing, and multi-factor authentication (MFA) abuse to steal data from SharePoint environments. [.
9 Jul 2026
Critical9 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
A foreign, financially motivated group was responsible for a cyberattack on state-owned forestry company Latvijas Valsts Mezi (LVM), officials said.
9 Jul 2026
Medium9 Jul 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
A cloud intrusion that ended with the deployment of cryptomining malware has exposed a bigger risk for enterprises: AI gateways that concentrate access to cloud identities, permissions, and foundation models in a…
9 Jul 2026
Medium9 Jul 2026
The Japan Times
Government · Records not stated
The Japan Times reports: An 18-year-old man has been arrested for his suspected involvement in a cyberattack on the operator of the Kaikatsu Club internet cafe chain, according to investigative sources. On Wednesday…
9 Jul 2026
Critical9 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Hackers exploited a zero-day vulnerability in a third-party system to access a KDDI email system for ISPs.
The post 12 Million Impacted by Data Breach at Japanese Telco KDDI appeared first on SecurityWeek.
9 Jul 2026
Critical9 Jul 2026
Organisation not named
Education · Records not stated
The disclosure as indexed does not name the organisation.
Hackers accessed the institution’s internal network and deleted two drives containing employee, student, and university data.
The post Mount Royal University Confirms Data Stolen in Ransomware Attack appeared first on…
9 Jul 2026
Critical9 Jul 2026
AssuranceAmerica data breach
Finance · Records not stated
American insurance company AssuranceAmerica has disclosed a data breach impacting nearly 7 million drivers after attackers gained access to its systems earlier this year.
9 Jul 2026
High9 Jul 2026
9 Jul 2026
Critical9 Jul 2026
Carnival Corporation
Retail · 6,000,000 records
6M customer records stolen including names and contact data
9 Jul 2026
Critical9 Jul 2026
KDDI Six ISPs
Technology · 14,200,000 records
14.2M email credentials exposed including plaintext passwords
9 Jul 2026
Critical9 Jul 2026
700Credit Automotive
Finance · Records not stated
5.8M consumer records stolen via API compromise
9 Jul 2026
Critical9 Jul 2026
Global Credential Dump
Sector not stated · 24,000,000,000 records
24B credentials exposed via infostealer logs
9 Jul 2026
Critical9 Jul 2026
Charter Spectrum
Technology · 13,000,000 records
13M customer records leaked post-ransom refusal
9 Jul 2026
Were you affected?