Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,314
Disclosures in the tracker, all years
2,028
Of those, indexed in 2026
76
Added in October
21
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 21 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
73 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- Canada16 Oct 2026McMurray MétisHow they got in: email made to look like it came from a trusted sender.Yahoo News Canada
- Canada14 Oct 2026Nova Scotia minor hockey communityHow they got in: email made to look like it came from a trusted sender.PNI Atlantic News
Medium31 Jul 2026
Illuminate Education
Education · Records not stated
Edtech company data breach leading to FTC settlement and data security program requirements
31 Jul 2026
Critical31 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
Healthcare billing company network breach exposed sensitive data affecting 1.26 million people
31 Jul 2026
High31 Jul 2026
KT Corp
Technology · Records not stated
South Korea telecom giant hit with massive data breach fine by Personal Information Protection Commission
31 Jul 2026
Critical31 Jul 2026
Transport for London (TfL)
Government · Records not stated
Cyber attack caused £39m loss; hackers gained access to transport network core systems
31 Jul 2026
Critical31 Jul 2026
EVO Banco
Finance · 1,270,000 records
2024 API vulnerability exposed financial and identity data of 1.27 million records
31 Jul 2026
High31 Jul 2026
Intesa Sanpaolo S.p.A.
Finance · Records not stated
Employee unlawfully accessed customer data over two years, €31.8m impact
31 Jul 2026
High31 Jul 2026
Synnovis/NHS Essex
Healthcare · 900,000 records
Thousands of patient records stolen in ransomware attack affecting NHS trust in Essex
31 Jul 2026
Critical31 Jul 2026
McLaren Health Care
Healthcare · Records not stated
Ransomware attacks in 2023 and 2024 exposed data on 3.2 million victims
31 Jul 2026
Critical31 Jul 2026
Instructure
Education · Records not stated
Supply chain breach involving Canvas platform generated over 50% of breach notices in 2026
31 Jul 2026
High31 Jul 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
Data breach with cybersecurity vulnerabilities; fined €42 million by French regulator in Jan 2026
31 Jul 2026
High31 Jul 2026
Yearslong data breach of residents' private health-related information
Government · Records not stated
Yearslong data breach of residents' private health-related information
31 Jul 2026
High31 Jul 2026
CommonSpirit Health
Healthcare · 19,027 records
19,027 patient records exposing personal and medical information
31 Jul 2026
High31 Jul 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen in ransomware attack
31 Jul 2026
High31 Jul 2026
EY (Ernst & Young)
Legal · Records not stated
Third-party vendor breach exposed sensitive tax client data after 81-day notification delay
31 Jul 2026
Critical31 Jul 2026
Spectrum (Charter Communications)
Technology · 42,000,000 records
Data breach exposed 4.9 million confirmed accounts with 42 million records claimed stolen
31 Jul 2026
Critical31 Jul 2026
ANTS (French ID Agency)
Government · 19,000,000 records
Cyberattack exposed 19 million records with personal data linked to French identity documents
31 Jul 2026
High31 Jul 2026
U.S. Civil Service/White House
Government · Records not stated
Thousands of civil servants' passwords and White House-linked passwords exposed since early 2024
31 Jul 2026
Critical31 Jul 2026
TriZetto
Healthcare · 3,000,000 records
More than 3 million people impacted by breach of healthcare tech provider software affecting multiple counties
31 Jul 2026
Critical31 Jul 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen in ransomware attack affecting healthcare services
31 Jul 2026
Critical31 Jul 2026
FinWise Bank
Finance · 689,000 records
Insider breach exposed data of 689,000 customers in 2024
31 Jul 2026
Medium31 Jul 2026
31 Jul 2026
Critical31 Jul 2026
LastPass
Technology · 1,600,000 records
2022 breach exposed 1.6 million users, resulted in ICO fine
31 Jul 2026
High31 Jul 2026
Synnovis NHS
Healthcare · 900,000 records
Thousands of patient records stolen during ransomware attack on Mid South Essex Foundation Trust
31 Jul 2026
High31 Jul 2026
Essex NHS
Healthcare · 900,000 records
Patient records stolen in cyber attack, disclosed over 6 months after notification
31 Jul 2026
Were you affected?