Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,335
Disclosures in the tracker, all years
2,049
Of those, indexed in 2026
111
Added in October
18
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 25 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
74 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- Canada23 Oct 2026Crime Stoppers programs in OntarioHow they got in: a supplier or vendor that was compromised first.Global News
- Canada22 Oct 2026Toronto Crime StoppersHow they got in: a supplier or vendor that was compromised first.Global News
- Canada21 Oct 2026Canadian Crime Stoppers AssociationHow they got in: a supplier or vendor that was compromised first.CBC News
- Canada17 Oct 2026More RewardsThe source does not say how they got in.CTV News
- Canada16 Oct 2026McMurray MétisHow they got in: email made to look like it came from a trusted sender.Yahoo News Canada
High1 Jun 2025
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Energy facility breached via private APN, supplies heat to ~50,000 residents
1 Jun 2025
Critical1 Jun 2025
Qantas
Sector not stated · 6,000,000 records
Cyber attack on third-party customer service platform compromised 6 million customer records
1 Jun 2025
Critical1 Jun 2025
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Iran-linked cyberattacks on operational technology across water systems in 12 US states
1 Jun 2025
Critical1 Jun 2025
Water utilities (12 states)
Government · Records not stated
Cyberattacks on operational technology across at least 12 states; South Dakota and Georgia announced incidents
1 Jun 2025
High1 Jun 2025
LexisNexis
Legal · Records not stated
Suspicious activity detected on servers; Diligence, Metabase API, and Newsdesk services shut down
1 Jun 2025
High1 Jun 2025
North Carolina Ports
Sector not stated · Records not stated
Cybersecurity incident forced shift to manual operations; systems under restoration
1 Jun 2025
High1 Jun 2025
Framework
Technology · Records not stated
Data breach affecting all customers: names, emails, phone numbers, physical addresses exposed
1 Jun 2025
High1 Jun 2025
IEH Corporation
Government · Records not stated
Military device manufacturer cyber incident disclosed to SEC affecting specialized military products
1 Jun 2025
Critical1 Jun 2025
Medical Billing Company (unidentified)
Healthcare · 1,300,000 records
1.3 million individuals' protected health data leaked to dark web in ransomware attack
1 Jun 2025
High1 Jun 2025
Water utilities
Government · Records not stated
Cyberattacks on operational technology systems expanded to 12 states including South Dakota and Georgia
1 Jun 2025
High1 Jun 2025
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Wave of cyberattacks by UNC6671 extortion group targeting financial organizations
1 Jun 2025
Critical1 Jun 2025
PEAR ransomware attack
Healthcare · 1,260,000 records
PEAR ransomware attack exposed 1.26 million patients' data. Medical billing company in Augusta, Georgia
1 Jun 2025
High1 Jun 2025
North Carolina Ports Authority
Sector not stated · Records not stated
Cyberattack disrupted IT systems and operations at Port of Wilmington
1 Jun 2025
High1 Jun 2025
TrueConf
Technology · Records not stated
Hackers breached servers and trojanized client installers with backdoors via unpatched vulnerabilities
1 Jun 2025
Critical1 Jun 2025
Unnamed medical billing company
Healthcare · 1,300,000 records
Ransomware attack leaked protected health data on 1.3 million people
1 Jun 2025
Critical1 Jun 2025
Unidentified Medical Billing Company
Healthcare · 1,300,000 records
Ransomware attack exposed protected health data on 1.3 million people to dark web
1 Jun 2025
Critical1 Jun 2025
Paraguayan Government
Government · 7,400,000 records
7.4 million records containing PII of Paraguayan citizens offered for sale
1 Jun 2025
Critical1 Jun 2025
MCBS Medical Billing
Healthcare · 1,300,000 records
PEAR ransomware attack exposed health data on 1.3 million patients, including protected health information
1 Jun 2025
Critical1 Jun 2025
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patients exposed in PEAR ransomware attack affecting healthcare billing and practice-management
1 Jun 2025
Critical1 Jun 2025
Unnamed Medical Billing Company
Healthcare · 1,300,000 records
2025 ransomware attack exposed protected health data on 1.3 million people, leaked to dark web
1 Jun 2025
Critical1 Jun 2025
Medical billing company
Healthcare · 1,300,000 records
2025 ransomware attack exposed protected health data on 1.3 million people, leaked to dark web
1 Jun 2025
Critical1 Jun 2025
Aflac Insurance
Finance · 1,300,000 records
Data breach exposed 22.65 million individuals
1 Jun 2025
High1 Jun 2025
Essex NHS Trust
Healthcare · 900,000 records
Patient records stolen in cyber attack, disclosed 6+ months after notification
1 Jun 2025
Critical1 Jun 2025
Medical Billing Company (Unnamed)
Healthcare · 1,300,000 records
Ransomware attack exposed protected health data on 1.3 million people to dark web
1 Jun 2025
Were you affected?