Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,306
Disclosures in the tracker, all years
2,020
Of those, indexed in 2026
68
Added in October
18
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 20 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
65 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- China14 Oct 2026Hospitals and healthcare organizationsHow they got in: email made to look like it came from a trusted sender.SecurityWeek
Critical6 Aug 2026
6 Aug 2026
High6 Aug 2026
Intesa Sanpaolo
Finance · Records not stated
Employee insider threat unlawfully accessed customer data over 2+ years, resulting in €31.8m fine
6 Aug 2026
Critical6 Aug 2026
Unknown Medical Billing Company
Healthcare · 1,300,000 records
Ransomware attack exposed sensitive protected health data on 1.3 million people to dark web
6 Aug 2026
High6 Aug 2026
Post Office Limited
Government · Records not stated
Data breach of Horizon IT scandal victims' records, reprimanded by ICO as entirely preventable
6 Aug 2026
Critical6 Aug 2026
Canada Life
Finance · 5,500,000 records
5.5 million records alleged stolen and put up for sale on dark web
6 Aug 2026
High6 Aug 2026
Cyberattack on law firm
Legal · 13,000 records
Cyberattack on law firm exposed hospital records of approximately 13,000 patients in New Jersey
6 Aug 2026
Critical6 Aug 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen in major ransomware attack affecting healthcare services
6 Aug 2026
Critical6 Aug 2026
US Government Civil Service
Government · Records not stated
Thousands of civil servants' passwords exposed since early 2024, including White House-linked credentials
6 Aug 2026
High6 Aug 2026
Valley Kidney Specialists
Healthcare · Records not stated
Data breach exposed personal and health information of patients
6 Aug 2026
Critical6 Aug 2026
Conduent
Healthcare · 62,200,000 records
Data breach exposed 62.2 million records, third-largest US healthcare hack
6 Aug 2026
Medium6 Aug 2026
Greene County USA
Government · Records not stated
Tax and court payment systems taken offline by ransomware
6 Aug 2026
Medium6 Aug 2026
Liechtenstein Government Registry
Government · Records not stated
31K beneficial ownership records exposed
6 Aug 2026
High6 Aug 2026
6 Aug 2026
Critical6 Aug 2026
Craneware Healthcare Software
Healthcare · Records not stated
Customer and partner records stolen from hospitals
6 Aug 2026
Medium6 Aug 2026
TruStage Financial Group
Finance · Records not stated
10.6K financial records exposed in network intrusion
6 Aug 2026
High6 Aug 2026
Greene County Government
Government · Records not stated
Tax, court, and payment systems taken offline
6 Aug 2026
High6 Aug 2026
Pennington County State Attorney
Government · Records not stated
Government systems compromised in ransomware attack
6 Aug 2026
High6 Aug 2026
6 Aug 2026
High6 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
A recent wave of cyberattacks targeting hedge funds, private-equity firms, and other financial organizations has been linked to UNC6671, an extortion group reportedly associated with the BlackFile campaign extortion…
6 Aug 2026
Critical6 Aug 2026
NYC Health + Hospitals
Healthcare · 1,800,000 records
1.8M patient records and biometrics exposed
6 Aug 2026
Medium6 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
North Carolina Ports is recovering from a cyberattack after its IT system was “hacked by an outside actor or group,” requiring a switch to manual processing of operations.
6 Aug 2026
Medium6 Aug 2026
Cedar Crest College
Education · Records not stated
Student and faculty data exfiltrated via ransomware
6 Aug 2026
High6 Aug 2026
6 Aug 2026
Critical6 Aug 2026
Credential Dump Elasticsearch
Sector not stated · Records not stated
24B stolen credential records exposed publicly
6 Aug 2026
Were you affected?