Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,367
Disclosures in the tracker, all years
2,083
Of those, indexed in 2026
147
Added in October
22
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 31 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
77 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- China20 Oct 2026Deere, SharkNinja and CumminsHow they got in: a known flaw in software the victim ran.The Hacker News
Critical5 Oct 2024
Verizon (Salt Typhoon)
Technology · Records not stated
Chinese hackers accessed wiretap request data at Verizon
5 Oct 2024
Critical5 Oct 2024
T-Mobile (Salt Typhoon)
Technology · Records not stated
Chinese Salt Typhoon hackers accessed customer wiretap data at carrier
5 Oct 2024
Critical5 Oct 2024
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Chinese hackers accessed US lawful intercept systems at major carriers
5 Oct 2024
Critical3 Oct 2024
American Water Works
Sector not stated · Records not stated
Largest US water utility disconnected systems after cyberattack
3 Oct 2024
Medium3 Oct 2024
Fidelity Investments (Oct)
Finance · Records not stated
28K additional customer records exposed in second incident
3 Oct 2024
Critical1 Oct 2024
Japan Aerospace Agency
Government · Records not stated
October data breach leveraging VPN and Microsoft 365 security holes; attributed to Chinese state actors
1 Oct 2024
High1 Oct 2024
Japan Aerospace Agency
Government · Records not stated
Data breach leveraging VPN and Microsoft 365 security holes, attributed to Chinese state actors
1 Oct 2024
Critical1 Oct 2024
Hot Topic
Retail · 350,000,000 records
350 million customers' personal and payment data exposed due to infostealer infection
1 Oct 2024
Critical1 Oct 2024
Organisation not named
Technology · 24,000,000 records
The disclosure as indexed does not name the organisation.
GDPR breach in October 2024 compromising 24 million individuals' personal and financial data; €42M fine
1 Oct 2024
Critical1 Oct 2024
Hot Topic
Retail · 350,000,000 records
350 million customers' personal and payment data exposed via infostealer malware infection
1 Oct 2024
Critical1 Oct 2024
Organisation not named
Finance · 24,000,000 records
The disclosure as indexed does not name the organisation.
October 2024 breach compromised personal data of over 24 million individuals including sensitive financial information; €42 million fine
1 Oct 2024
Critical1 Oct 2024
Hot Topic
Retail · 350,000,000 records
Infostealer infection exposed personal and payment data of 350 million customers
1 Oct 2024
Critical1 Oct 2024
Japan Aerospace Agency
Government · Records not stated
October data breach leveraging VPN and Microsoft 365 security holes, attributed to Chinese state actors
1 Oct 2024
Critical1 Oct 2024
Organisation not named
Technology · 24,000,000 records
The disclosure as indexed does not name the organisation.
GDPR breach in October 2024 compromised personal data of over 24 million individuals including financial data; fined €42 million
1 Oct 2024
Critical1 Oct 2024
Hot Topic
Retail · 350,000,000 records
350 million customers' personal and payment data exposed via infostealer infection
1 Oct 2024
Critical1 Oct 2024
French Telecom Company
Technology · 24,000,000 records
GDPR breach compromised personal data of over 24 million individuals including sensitive financial information due to lack of basic security controls
1 Oct 2024
Critical1 Oct 2024
French Telecoms (unnamed subsidiaries)
Technology · 24,000,000 records
GDPR violations including lack of basic security controls; 24M customer records compromised with personal and financial data exposed
1 Oct 2024
Critical1 Oct 2024
Fortinet
Technology · Records not stated
FortiBleed campaign exposed valid admin and VPN credentials for 73,932 FortiGate firewalls
1 Oct 2024
Critical1 Oct 2024
French Telco Subsidiaries
Finance · 24,000,000 records
24 million individuals' personal and financial data compromised in October 2024 breach; €42 million fine
1 Oct 2024
High1 Oct 2024
Adobe Commerce Customers
Technology · Records not stated
Sensitive customer data from thousands of online stores stolen via CosmicSting exploitation
1 Oct 2024
Critical1 Oct 2024
French telecoms (unnamed subsidiaries)
Technology · Records not stated
October 2024 breach compromising personal data of 24+ million individuals including sensitive financial information; GDPR violations
1 Oct 2024
Critical1 Oct 2024
Organisation not named
Technology · 24,000,000 records
The disclosure as indexed does not name the organisation.
24 million+ individuals' personal and financial data compromised in October 2024 breach
1 Oct 2024
High1 Oct 2024
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Hackers breached facility supplying heat to 50,000 residents via private APN access point
1 Oct 2024
Critical1 Oct 2024
French Telecoms Subsidiaries
Technology · 24,000,000 records
Breach in October 2024 compromised personal data of over 24 million individuals including sensitive financial information, €42 million fine
1 Oct 2024
Were you affected?