Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,314
Disclosures in the tracker, all years
2,028
Of those, indexed in 2026
76
Added in October
21
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 21 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
73 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- Canada16 Oct 2026McMurray MétisHow they got in: email made to look like it came from a trusted sender.Yahoo News Canada
- Canada14 Oct 2026Nova Scotia minor hockey communityHow they got in: email made to look like it came from a trusted sender.PNI Atlantic News
Critical31 Jul 2026
Gaming Accounts
Technology · Records not stated
Over 11 million gaming account credentials exposed in 2024 data leaks discovered by Kaspersky DFI
31 Jul 2026
High31 Jul 2026
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Data breach requiring $40M settlement in class action lawsuit
31 Jul 2026
Critical31 Jul 2026
Meta/Facebook
Technology · Records not stated
2019 breach exposed hundreds of millions of Facebook passwords; fined $101.5M
31 Jul 2026
Critical31 Jul 2026
Meta (2018 breach)
Technology · Records not stated
2018 data breach resulted in €251 million fine from EU privacy regulator in December 2024
31 Jul 2026
High31 Jul 2026
Synnovis
Healthcare · 900,000 records
Thousands of NHS patient records stolen during ransomware attack affecting Mid South Essex Foundation Trust
31 Jul 2026
High31 Jul 2026
Essex NHS Trust
Healthcare · 900,000 records
Thousands of patient records stolen in cyber attack, disclosed over 6 months after notification
31 Jul 2026
Critical31 Jul 2026
Medical billing company (unnamed)
Healthcare · 1,300,000 records
2025 ransomware attack exposed protected health data on 1.3 million people to dark web
31 Jul 2026
Critical31 Jul 2026
Tribeca Film Festival
Sector not stated · 666,000 records
Unprotected database exposed 666,000 records including celebrity contact data with no password or encryption
31 Jul 2026
High31 Jul 2026
Huntsville Hospital Health System
Healthcare · Records not stated
Third-party data breach exposed patient information at hospital facilities
31 Jul 2026
High31 Jul 2026
Cencora
Retail · Records not stated
Data security incident affecting customers, $40M settlement reached
31 Jul 2026
Critical31 Jul 2026
MCBS
Healthcare · 1,200,000 records
Data breach affecting 1.2 million individuals at Atlanta-based medical business management company
31 Jul 2026
High31 Jul 2026
Illuminate Education
Education · Records not stated
Data breach at Wisconsin-based edtech company; settled with FTC requiring implementation of security program
31 Jul 2026
High31 Jul 2026
Thailand Ministry of Finance
Government · Records not stated
Hackers used autonomous AI agent for cyber-espionage campaign
31 Jul 2026
High31 Jul 2026
KT Corporation
Technology · Records not stated
Customer data breach at South Korean telecommunications company, fined $39 million
31 Jul 2026
Critical31 Jul 2026
PIH Health
Healthcare · 2,950,000 records
2024 ransomware hacking incident exposed 2.95 million patient records
31 Jul 2026
High31 Jul 2026
FRANCE TRAVAIL
Government · Records not stated
Hackers breached information system in Q1 2024, resulting in €5 million fine from CNIL
31 Jul 2026
High31 Jul 2026
TransUnion
Finance · 37,000 records
2019 breach exposed 37,000 people's credit and personal data
31 Jul 2026
High31 Jul 2026
Mizuno
Retail · Records not stated
Japanese sportswear company confirms data breach following 2024 ransomware attack affecting customers
31 Jul 2026
Critical31 Jul 2026
Meta
Technology · Records not stated
2018 breach resulting in €251 million GDPR fine by EU privacy regulator
31 Jul 2026
High31 Jul 2026
CommonSpirit Health
Healthcare · 19,027 records
19,027 patient records exposed with personal and medical information
31 Jul 2026
High31 Jul 2026
Essex NHS Trust
Healthcare · 900,000 records
Thousands of patient records stolen in ransomware cyberattack by Synnovis
31 Jul 2026
Critical31 Jul 2026
TriZetto
Healthcare · 3,400,000 records
3.4 million people's health and personal data stolen in 2024 cyberattack
31 Jul 2026
Critical31 Jul 2026
US Government Agencies
Government · Records not stated
Thousands of civil servants' passwords exposed since early 2024, including White House linked passwords
31 Jul 2026
High31 Jul 2026
Gaming Accounts (Multiple)
Technology · Records not stated
11 million gaming account credentials exposed
31 Jul 2026
Were you affected?