Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,349
Disclosures in the tracker, all years
2,062
Of those, indexed in 2026
121
Added in October
13
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 27 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
74 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- China20 Oct 2026John DeereHow they got in: automated AI tools that work through many organizations at once.SecurityWeek
- China20 Oct 2026Deere, SharkNinja and CumminsHow they got in: a known flaw in software the victim ran.The Hacker News
High1 Jan 2026
France Telco Subsidiaries
Technology · Records not stated
Data regulator fined €42 million for cybersecurity vulnerabilities contributing to 2024 breach; three major GDPR violations including lack of basic security controls
1 Jan 2026
High1 Jan 2026
Yearslong data breach
Government · Records not stated
Yearslong data breach exposed residents' private health-related information
1 Jan 2026
High1 Jan 2026
Yearslong data breach exposing residents' private health-related information
Healthcare · Records not stated
Yearslong data breach exposing residents' private health-related information
1 Jan 2026
High1 Jan 2026
Orange (France telecom subsidiaries)
Technology · Records not stated
Fined €42 million for cybersecurity vulnerabilities contributing to 2024 breach; three major GDPR violations
1 Jan 2026
High1 Jan 2026
Epic Systems
Healthcare · 300,000 records
300,000 people's digital health information records were accessed and sold from health records networks to law firms
1 Jan 2026
High1 Jan 2026
France telecom subsidiaries
Technology · Records not stated
Data breach in 2024 resulted in €42 million fine for cybersecurity vulnerabilities and lack of basic security controls
1 Jan 2026
High1 Jan 2026
FirstClass Travel
Sector not stated · Records not stated
Australian travel agency customer records allegedly breached, claimed on underground hacking forums
1 Jan 2026
High1 Jan 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
Data regulator fined $42-48 million for cybersecurity vulnerabilities contributing to 2024 data breach
1 Jan 2026
Medium1 Jan 2026
FirstClass Travel Agency
Sector not stated · Records not stated
Sydney-based travel agency; threat actor on underground forum alleged customer records breach
1 Jan 2026
High1 Jan 2026
Multi-year data breach of residents' private health-related information
Government · Records not stated
Multi-year data breach of residents' private health-related information
1 Jan 2026
High1 Jan 2026
French Telecom Subsidiaries
Technology · Records not stated
Data breach with inadequate security controls resulted in €42M GDPR fines from French data regulator
1 Jan 2026
High1 Jan 2026
Multi-year data breach
Healthcare · Records not stated
Multi-year data breach exposed residents' private health-related information
1 Jan 2026
High1 Jan 2026
French Telco Subsidiaries
Technology · Records not stated
Data regulator fined subsidiaries €42 million for cybersecurity vulnerabilities contributing to 2024 breach
1 Jan 2026
Critical1 Jan 2026
Armenia Government
Government · Records not stated
Alleged sale of 8M government records on hacker forum; authorities launched investigation
1 Jan 2026
High1 Jan 2026
Tribeca Film Festival
Sector not stated · 666,000 records
Unprotected database exposed 666,000 records including celebrity contact information with no password or encryption
1 Jan 2026
Critical1 Jan 2026
Qantas
Sector not stated · 5,670,000 records
Vishing attack exposed 5.67 million customer records including personal and travel data
1 Jan 2026
High1 Jan 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Yearslong data breach of residents' private health-related information reported
1 Jan 2026
Critical1 Jan 2026
Armenian Government
Government · Records not stated
Hackers offered 8 million government records for sale on hacker forum
1 Jan 2026
High1 Jan 2026
KT Corp
Technology · Records not stated
Data breach resulting in significant fine from South Korea's Personal Information Protection Commission
1 Jan 2026
High1 Jan 2026
FirstClass
Retail · Records not stated
Australian travel agency - customer records allegedly breached, threat actor posted on underground forums.
1 Jan 2026
High1 Jan 2026
Yearslong data breach of residents' private health-related information
Government · Records not stated
Yearslong data breach of residents' private health-related information
1 Jan 2026
High1 Jan 2026
Xsolis
Healthcare · Records not stated
Healthcare AI vendor breach in January 2026 exposed patient records from client healthcare organizations
1 Jan 2026
High27 Dec 2025
WIRED
Technology · 2,364,431 records
2,364,431 records exposed, Dates of birth, Display names, Email addresses, Genders and 4 more
27 Dec 2025
High26 Dec 2025
Utair
Government · 401,400 records
401,400 records exposed, Dates of birth, Email addresses, Genders, Loyalty program details and 4 more
26 Dec 2025
Were you affected?