Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,477
Disclosures in the tracker, all years
2,012
Of those, indexed in 2026
61
Added in October
17
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 19 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Twelve months
Disclosures indexed each month.
Counted on the date each disclosure was recorded in the index. The current month is shown in red and is still open. A phone shows the last six months.
Worldwide · How they got in
Incidents worldwide, by country.
65 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- Australia19 Oct 2026Poole GroupThe source does not say how they got in.Accountants Daily
- Australia16 Oct 2026Chadwick SwitchboardsThe source does not say how they got in.Cyber Daily
Medium19 Oct 2026
ConnectWise backup credentials
Finance · Records not stated
ConnectWise has disabled key cloud services and is investigating unauthorized access to customers’ Microsoft 365 environments after a credential tied to its Cloud Backup platform was compromised and used to…
19 Oct 2026
Medium19 Oct 2026
Ahold Delhaize
Sector not stated · Records not stated
Ahold Delhaize, the Dutch multinational grocery retailer, said Monday that a cyberattack forced it to take systems offline across most of its U.S. and European brands, impacting shoppers on both sides of the Atlantic.
19 Oct 2026
Critical18 Oct 2026
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 119
Technology · Records not stated
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter IronChain Ransomware Threatens Businesses with Permanent Data…
18 Oct 2026
High18 Oct 2026
Organisation not named
Education · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack on UIC College of Medicine resulted in theft of some information.
18 Oct 2026
Medium18 Oct 2026
Unnamed UK airport
Sector not stated · Records not stated
Ransomware attackers released stolen data from cyberattack on a UK airport.
18 Oct 2026
Critical18 Oct 2026
Organisation not named
Government · 3,000,000 records
The disclosure as indexed does not name the organisation.
Personal information of 3 million people exposed in breach of Pentagon personnel agency.
18 Oct 2026
High18 Oct 2026
Asos
Retail · Records not stated
Breach exposed customer data beyond basic contact details, per BBC investigation after hackers claimed to have taken more information than first disclosed.
18 Oct 2026
High18 Oct 2026
Utility account data
Sector not stated · 400,000 records
Utility account data breached, affecting roughly 400,000 customers of Georgia Power and Alabama Power.
18 Oct 2026
High18 Oct 2026
Driver records
Government · Records not stated
Driver records breached; state is mailing breach notification letters and offering affected drivers $1M identity theft insurance and credit monitoring.
18 Oct 2026
Medium18 Oct 2026
Gîtes de France
Retail · 117,574 records
117,574 records exposed, Booking details, Email addresses, Names, Phone numbers and 1 more
18 Oct 2026
Critical16 Oct 2026
Baltimore suburb
Government · Records not stated
Anne Arundel County, Maryland, said an intruder stole files from government systems, and investigators are working to assess how much data was exposed.
16 Oct 2026
Critical16 Oct 2026
Organisation not named
Sector not stated · 11,000,000 records
The disclosure as indexed does not name the organisation.
Burger King Japan, the Japanese subsidiary of global fast-food giant Burger King, disclosed a major data breach after attackers accessed a server containing 11.18 million customer records.
16 Oct 2026
Medium15 Oct 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
France-based operators of Danfoss refrigeration controllers have sharply reduced their internet exposure after the October 11 cyber-attack
15 Oct 2026
Critical15 Oct 2026
Ransomware Attacks Intensify
Sector not stated · Records not stated
Guru Baran reports: Ransomware gangs are moving beyond locked files and stolen data. Criminals now threaten employees, executives, and their families to force companies to pay. According to the Semperis 2026 Ransomware…
15 Oct 2026
High14 Oct 2026
Crunchbase
Technology · 559,908 records
559,908 records exposed, Email addresses, Employers, Job titles, Names and 3 more
14 Oct 2026
Medium13 Oct 2026
Russian internet provider SkyNet
Sector not stated · Records not stated
One of St. Petersburg's major internet providers said its network had been under a distributed denial-of-service (DDoS) attack since October 6, affecting services including online gaming, voice calls and video…
13 Oct 2026
Medium13 Oct 2026
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
The South African retail giant The Foschini Group (TFG) disclosed a cyberattack that disrupted IT systems at three of its British fashion brands, leaving some services unavailable.
13 Oct 2026
Medium12 Oct 2026
Sharecare
Healthcare · 318,185 records
318,185 records exposed, Dates of birth, Email addresses, Employers, Genders and 6 more
12 Oct 2026
Critical11 Oct 2026
Nippon Columbia malware incident
Sector not stated · 8,700,000 records
Daiichi Kosho, a major Japanese entertainment system maker, disclosed that a malware infection at its contractor, Nippon Columbia, exposed more than 8.7 million customer and employee records.
11 Oct 2026
High9 Oct 2026
Hundreds of thousands
Sector not stated · Records not stated
A company known for wearable cardiac sensors, iRhythm, has begun notifying states of the impact of a data breach from the summer.
9 Oct 2026
Medium9 Oct 2026
Neogen
Retail · 435,963 records
435,963 records exposed, Email addresses, Employers, Job titles, Names and 3 more
9 Oct 2026
Critical8 Oct 2026
ThreatsDay
Technology · Records not stated
The crooks have trust problems of their own. One ransomware affiliate decided to keep the profits for himself. Elsewhere, an attacker left a server exposed, complete with tools and traces of an intrusion. Apparently…
8 Oct 2026
Medium7 Oct 2026
CyrusOne
Retail · 373,460 records
373,460 records exposed, Email addresses, Employers, Job titles, Names and 3 more
7 Oct 2026
Medium7 Oct 2026
PoeLLM malware infects
Sector not stated · Records not stated
A cryptomining campaign targeting exposed AI services is using PoeLLM malware to turn compromised servers into scanners and exploit launchpads.
7 Oct 2026
Were you affected?