Disclosure tracker › Disclosures in 2026
Intelligence · Disclosure tracker
Disclosures in 2026
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,306
Disclosures in the tracker, all years
2,020
Of those, indexed in 2026
69
Added in October
19
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 20 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
3,996 results · Disclosures in 2026. Clear filters
Critical9 Jul 2026
NYC Health Hospitals
Healthcare · 1,800,000 records
1.8M patient records leaked including biometrics
9 Jul 2026
Critical9 Jul 2026
ADT Security
Sector not stated · 30,814 records
5.5M unique emails and PII leaked after breach
9 Jul 2026
Critical9 Jul 2026
Conduent
Government · 62,200,000 records
62.2M records exposed including SSNs and medical data
9 Jul 2026
Critical9 Jul 2026
KDDI Six ISPs Japan
Technology · 14,200,000 records
14.2M email credentials exposed in plaintext
9 Jul 2026
Critical9 Jul 2026
NAIC Insurance Regulators
Finance · 12,000 records
3.1TB stolen via Oracle PeopleSoft zero-day
9 Jul 2026
High9 Jul 2026
Acworth City Government
Government · Records not stated
Government systems hit by INC_RANSOM ransomware
9 Jul 2026
High9 Jul 2026
9 Jul 2026
High9 Jul 2026
Eurail Interrail
Sector not stated · Records not stated
300K traveler passports and IBANs exposed
9 Jul 2026
Critical9 Jul 2026
Global Infostealer Credential Dump
Sector not stated · Records not stated
24B stolen credentials exposed online
9 Jul 2026
Critical9 Jul 2026
NYC Health and Hospitals
Healthcare · 1,800,000 records
1.8M records stolen including biometrics
9 Jul 2026
Critical9 Jul 2026
Conduent Business Services
Sector not stated · 62,200,000 records
62.2M records exposed in ransomware attack
9 Jul 2026
Medium8 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The threat actor claiming responsibility says they stole source code, encryption keys and more.
8 Jul 2026
Medium8 Jul 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
A financially motivated operation uses lures of cracked or pirated software to deliver a malware two-for-one combo for data theft and cryptomining.
8 Jul 2026
Medium8 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
For years, account takeover (ATO) followed a predictable script. Attackers bought stolen credentials in bulk, ran them through automated tools, and waited for matches. Credential stuffing was cheap, scalable, and for…
8 Jul 2026
Medium8 Jul 2026
The professional services giant
Sector not stated · Records not stated
The professional services giant says it contained the incident, remediated its source, and experienced no operational or service delivery impact.
The post Accenture Confirms Data Breach After Hacker Claims Source Code…
8 Jul 2026
Critical8 Jul 2026
Telco giant KDDI
Technology · Records not stated
Japanese telecommunications giant KDDI says that millions of people had their email addresses and passwords exposed after attackers breached an email platform used by five internet service providers (ISPs) in the…
8 Jul 2026
High8 Jul 2026
Tchap French Gov Messenger
Government · Records not stated
73K government accounts and 643K messages stolen
8 Jul 2026
Critical8 Jul 2026
HSIN security platform
Government · Records not stated
HSIN security platform breached by unauthorized party
8 Jul 2026
High8 Jul 2026
Aesthetic Surgical Images
Healthcare · Records not stated
Patient records stolen by INC_RANSOM
8 Jul 2026
Medium8 Jul 2026
8 Jul 2026
Critical8 Jul 2026
NYC Health Hospitals
Healthcare · 1,800,000 records
1.8M records stolen including biometrics
8 Jul 2026
Critical8 Jul 2026
8 Jul 2026
Critical8 Jul 2026
KDDI Corporation
Technology · 14,200,000 records
14.2M email credentials exposed across 6 ISPs
8 Jul 2026
Critical8 Jul 2026
DHS Homeland Security Network
Government · Records not stated
Federal intel-sharing platform breached
8 Jul 2026
Were you affected?