Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,306
Disclosures in the tracker, all years
2,020
Of those, indexed in 2026
69
Added in October
19
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 20 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
68 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- Canada16 Oct 2026McMurray MétisHow they got in: email made to look like it came from a trusted sender.Yahoo News Canada
- Canada2 Oct 2026Kingston PoliceHow they got in: stolen or reused passwords.Global News
High1 Aug 2026
Woeful security led to sensitive data
Government · Records not stated
Woeful security led to sensitive data leak from unpatched CMS
1 Aug 2026
High1 Aug 2026
Woeful security led to sensitive data
Government · Records not stated
Woeful security led to sensitive data leak; uncertainty over exfiltration
1 Aug 2026
High1 Aug 2026
Valve/Steam
Technology · Records not stated
European logistics partner CEVA Logistics breached; customer names, addresses, order data stolen affecting Steam hardware shipments
1 Aug 2026
High1 Aug 2026
Uber Freight
Technology · Records not stated
Hacking and extortion gang claimed data breach at ridesharing giant's logistics division
1 Aug 2026
High1 Aug 2026
Woeful security led to sensitive criminal records data
Government · Records not stated
Woeful security led to sensitive criminal records data leak, exfiltration status unknown
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Woeful security led to sensitive data leak from criminal records system
1 Aug 2026
High1 Aug 2026
Woeful security led to sensitive criminal data
Government · Records not stated
Woeful security led to sensitive criminal data leak exposure
1 Aug 2026
Critical1 Aug 2026
LiteLLM (AI supply chain)
Technology · Records not stated
2,500+ companies and 434,000 CI/CD pipelines exposed in largest AI supply chain breach of 2026
1 Aug 2026
High1 Aug 2026
Healthcare advocacy vendor breach
Healthcare · Records not stated
Healthcare advocacy vendor breach exposed employees' Social Security numbers
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Poor security at criminal records office led to sensitive data leak exposure
1 Aug 2026
Critical1 Aug 2026
SplitVPN
Technology · 865,000 records
865,000 users' personal records exposed in data breach of Russian VPN provider
1 Aug 2026
High1 Aug 2026
Shipping partner breach
Technology · Records not stated
Shipping partner breach exposed names, addresses, and order data of European Steam hardware customers
1 Aug 2026
High1 Aug 2026
Allstate
Finance · Records not stated
Breach claimed to involve employee-related records; scope of exposure still unclear
1 Aug 2026
High1 Aug 2026
Valve (CEVA Logistics)
Technology · Records not stated
European logistics partner CEVA Logistics breached, exposing Steam hardware customer names, addresses, and order data
1 Aug 2026
High1 Aug 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
Steam shipping partner CEVA Logistics breach exposed names, addresses, and order data of European hardware customers
1 Aug 2026
High1 Aug 2026
Sensitive data
Government · Records not stated
Sensitive data leak due to woeful security, unpatched CMS and unread alerts
1 Aug 2026
Critical1 Aug 2026
LiteLLM
Technology · Records not stated
AI supply chain attack exposed 2,500+ companies and 434,000 CI/CD pipelines
1 Aug 2026
High1 Aug 2026
HCL Technologies
Technology · Records not stated
Hacker group claimed access to employee data; company disputes claim and states data may be years-old
1 Aug 2026
High1 Aug 2026
CareCloud Inc.
Healthcare · 345,000 records
Cyberattack exposed data on 345,000 patients including protected health information
1 Aug 2026
High1 Aug 2026
Metropolitan Police Service
Government · Records not stated
Data protection failures including unredacted documents sent to stalkers and bulk email breaches
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Coordinated cyberattacks on 30+ renewable energy installations and heat plants; second incident hidden for months
1 Aug 2026
High1 Aug 2026
CareCloud
Healthcare · 345,000 records
Cyberattack and data theft notified more than 345,000 patients of exposure
1 Aug 2026
Critical1 Aug 2026
IEH Corporation
Government · Records not stated
Military device manufacturer disclosed cyber incident affecting products for satellites, missiles, and jets
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
Healthcare billing company; 1.26 million patients exposed in PEAR ransomware attack
1 Aug 2026
Were you affected?