Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,292
Disclosures in the tracker, all years
2,005
Of those, indexed in 2026
50
Added in October
9
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 18 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
64 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- China14 Oct 2026Hospitals and healthcare organizationsHow they got in: email made to look like it came from a trusted sender.SecurityWeek
Critical1 Sep 2026
CenterPoint Energy
Sector not stated · 7,500,000 records
7.5 million customer records stolen in confirmed breach
1 Sep 2026
Critical1 Sep 2026
IDScan
Technology · Records not stated
Over 150 million driver's licenses stolen in confirmed data breach
1 Sep 2026
High1 Sep 2026
Trezor (email provider)
Technology · Records not stated
Data breach of email provider serving hardware crypto wallet company, scammers targeting users
1 Sep 2026
Critical1 Sep 2026
IDScan
Technology · Records not stated
Breach exposed more than 150 million driver's licenses stolen from ID verification service
1 Sep 2026
High1 Sep 2026
CenterPoint Energy
Sector not stated · Records not stated
Data breach confirmed after hacker leaked files from utility company systems
1 Sep 2026
High1 Sep 2026
Twilio SendGrid
Technology · 848,000 records
Hacker claimed breach impacting approximately 848,000 customers
1 Sep 2026
High1 Sep 2026
Novo Nordisk
Healthcare · Records not stated
Data breach tied to stolen GitHub access tokens; FulcrumSec cyber extortion group involved
1 Sep 2026
High1 Sep 2026
e-Panic
Government · Records not stated
Gauteng government panic app data breach exposed personal information
1 Sep 2026
Critical1 Sep 2026
OpenAI Australia
Technology · Records not stated
Data breach confirmed involving Australian government Medicare information
1 Sep 2026
High1 Sep 2026
DriveWealth
Finance · Records not stated
Attackers used social engineering to breach Revolut customer data
1 Sep 2026
Critical1 Sep 2026
Gyazo
Technology · 23,600,000 records
Data breach exposed 23.6 million user records
1 Sep 2026
High1 Sep 2026
Astrana Health
Healthcare · Records not stated
Hackers used social engineering to access servers and steal private health information
1 Sep 2026
Critical1 Sep 2026
Pentagon
Government · Records not stated
Data breach exposed Social Security numbers and unencrypted personnel information of military troops
1 Sep 2026
Critical1 Sep 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Hackers stole personal information and Social Security numbers of FBI agents
1 Sep 2026
Critical1 Sep 2026
IDScan
Technology · Records not stated
Data breach exposed 153 million driver's license scans stolen from ID verification systems
1 Sep 2026
High1 Sep 2026
CenterPoint Energy
Sector not stated · Records not stated
Data breach confirmed after hacker leaked stolen files from utility company systems
1 Sep 2026
High1 Sep 2026
Revolut
Finance · Records not stated
Sensitive customer data disclosed to unauthorized third party after fake government requests
1 Sep 2026
Critical1 Sep 2026
Gyazo
Technology · 23,620,000 records
Breach exposed 23.62 million user records and 490 million image metadata records including email addresses
1 Sep 2026
High1 Sep 2026
Novo Nordisk
Healthcare · Records not stated
Data breach tied to stolen GitHub access tokens; hardcoded credentials exploited
1 Sep 2026
Critical1 Sep 2026
Aeroméxico
Sector not stated · 15,000,000 records
15 million records leaked in massive data breach; anti-corruption investigation launched
1 Sep 2026
High1 Sep 2026
DriveWealth
Finance · Records not stated
Revolut customer data exposed via social engineering attack against DriveWealth
1 Sep 2026
Critical1 Sep 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
ShinyHunters breached FBI servers; stole officials' job information, medical and psychiatric records
1 Sep 2026
High1 Sep 2026
Astrana Health
Healthcare · Records not stated
Data stolen from servers via social engineering attack; confidential information exposed
1 Sep 2026
Critical1 Sep 2026
Breach
Healthcare · 727,000 records
Breach exposed 727,000 patient and contact records; CNIL fined €500,000
1 Sep 2026
Were you affected?