Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,307
Disclosures in the tracker, all years
2,021
Of those, indexed in 2026
71
Added in October
20
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 20 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
69 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- Australia19 Oct 2026Poole GroupThe source does not say how they got in.Accountants Daily
- Australia16 Oct 2026Chadwick SwitchboardsThe source does not say how they got in.Cyber Daily
Medium29 Aug 2026
An alleged Chinese-speaking actor
Sector not stated · Records not stated
An alleged Chinese-speaking actor breached Philippine nuclear and naval targets by exploiting known flaws, stealing sensitive data. A suspected Chinese-speaking operator targeted a Philippine nuclear research body and…
29 Aug 2026
Critical29 Aug 2026
McKesson is
Healthcare · 284,000,000 records
Lawrence Abrams reports: Healthcare and pharmaceutical distribution giant McKesson has disclosed a cybersecurity incident involving unauthorized access to third-party applications and data theft, with the ShinyHunters…
29 Aug 2026
Critical29 Aug 2026
Berlin's state government has
Government · Records not stated
Berlin's state government has confirmed that it is the target of an extortion attempt following the August compromise of the city's state administrative network, and said it will not meet the extortionists' demands.…
29 Aug 2026
Critical28 Aug 2026
McKesson
Healthcare · 284,000,000 records
Healthcare and pharmaceutical distribution giant McKesson has disclosed a cybersecurity incident involving unauthorized access to third-party applications and data theft, with the ShinyHunters extortion group claiming…
28 Aug 2026
Medium28 Aug 2026
Love Electric Breach
Sector not stated · Records not stated
Love Electric’s alleged data breach exposes sensitive driver data and highlights the identity risks created by third-party salary sacrifice providers. A seller on an English-language data-breach forum claimed on…
28 Aug 2026
Medium28 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The frustrating reality after an OT cyberattack: no data, no trail, and no history.
28 Aug 2026
Medium28 Aug 2026
Matt Trewern
Healthcare · Records not stated
Matt Trewern reports on another charity hit by the Beacon CRM data breach that affected more than 1,000 charities and non-profits: People using an HIV charity have been told their “sensitive and personal”…
28 Aug 2026
Critical28 Aug 2026
Winona County
Finance · Records not stated
WXOW in Minnesota reports: Winona County paid more than $128,000 following a January ransomware attack, according to a county news release. The county said it negotiated and paid $128,539.57 with assistance from its…
28 Aug 2026
High28 Aug 2026
Toy-making giant Hasbro
Finance · Records not stated
Hasbro, one of the world's largest toy and game companies, has disclosed that attackers have accessed the personal and financial information of an undisclosed number of employees.
28 Aug 2026
Critical28 Aug 2026
A cyberattack on Manchester Airports Group
Sector not stated · 8,700,000 records
A cyberattack on Manchester Airports Group exposed data of 8.7 million customers across Manchester, Stansted, and East Midlands airports. Manchester Airports Group disclosed that an unauthorised third party accessed…
28 Aug 2026
Medium27 Aug 2026
Manchester Airports Group
Sector not stated · Records not stated
The Manchester Airports Group (MAG) disclosed that hackers breached its systems and stole customer data, including Wi-Fi sign-ups from Manchester, Stansted, and East Midlands airports.
27 Aug 2026
Medium27 Aug 2026
Manchester Airports Group
Sector not stated · Records not stated
Gabriel Higgins reports: Manchester Airports Group (MAG) has confirmed that it has been the target of a cybersecurity incident carried out by an unauthorised third party, resulting in the exposure of a quantity of…
27 Aug 2026
Critical27 Aug 2026
A spokesperson
Sector not stated · 8,700,000 records
A spokesperson told The Yorkshire Post that roughly 8.7 million people were impacted, although they did not provide a date range. They added that in the “vast majority” of cases, the only information accessed was an…
27 Aug 2026
Medium27 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Customer data linked to bookings and airport Wi-Fi registrations at Manchester, Stansted and East Midlands airports has been accessed by an unauthorized third party
27 Aug 2026
Medium27 Aug 2026
Brian Krebs
Government · Records not stated
Brian Krebs reports: Authorities in Australia have arrested two men believed to be members of TeamPCP, a prolific cybercrime and data extortion group blamed for perpetrating the longest running spree of software supply…
27 Aug 2026
Critical27 Aug 2026
DOJ firearms agency
Government · Records not stated
The Bureau of Alcohol, Tobacco, Firearms and Explosives confirmed it experienced a cyberattack on a system containing investigation information, as a prolific ransomware gang claimed to have carried out the breach.
27 Aug 2026
High27 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Authorities in Australia have arrested two men believed to be members of TeamPCP, a prolific cybercrime and data extortion group blamed for perpetrating the longest running spree of software supply chain attacks ever.…
27 Aug 2026
Critical27 Aug 2026
Carhartt data breach
Sector not stated · 12,900,000 records
The ShinyHunters extortion group has published sensitive data from nearly 13 million accounts stolen from clothing retailer giant Carhartt earlier this month, according to data breach notification service Have I Been…
27 Aug 2026
Medium27 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The cybersecurity incident has disrupted Boston Scientific’s ability to process and ship customer orders.
The post Cyberattack Causes Global Disruption at Boston Scientific appeared first on SecurityWeek.
27 Aug 2026
Medium27 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The pro-Russian hacker group Server Killers claimed responsibility for the attack.
The post Pro-Russian Hackers Claim Responsibility for Major Cyberattack on Norway’s Public Digital Services appeared first on…
27 Aug 2026
Medium26 Aug 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
The company released a statement and filed documents with the Securities and Exchange Commission (SEC) saying a cybersecurity incident was discovered on Tuesday.
26 Aug 2026
Medium26 Aug 2026
Boston Scientific
Healthcare · Records not stated
Medical technology company Boston Scientific has been targeted in a cyberattack that disrupted some of its IT systems, causing operational disruptions globally.
26 Aug 2026
Medium26 Aug 2026
Organisation not named
Sector not stated · 2,000 records
The disclosure as indexed does not name the organisation.
Here’s one we missed last week. Hannah Spray reports: The personal information of more than 2,000 people was stolen from Autism Services of Saskatoon during a data breach last year. In the aftermath, the…
26 Aug 2026
Medium26 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
The agency has released guidance on reducing internet exposure in the wake of the recent Iran-linked hacker attacks.
The post CISA: Over 100 Internet-Exposed Water Systems Targeted in July Cyberattacks appeared first…
26 Aug 2026
Were you affected?