Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,314
Disclosures in the tracker, all years
2,028
Of those, indexed in 2026
76
Added in October
21
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 21 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
72 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- China20 Oct 2026Deere, SharkNinja and CumminsHow they got in: a known flaw in software the victim ran.The Hacker News
- China20 Oct 2026John DeereHow they got in: automated AI tools that work through many organizations at once.SecurityWeek
- China14 Oct 2026Hospitals and healthcare organizationsHow they got in: email made to look like it came from a trusted sender.SecurityWeek
High1 Aug 2026
Uber Freight
Technology · Records not stated
Hacking group claimed data breach at ridesharing giant's logistics division; investigation underway
1 Aug 2026
High1 Aug 2026
Valve (CEVA Logistics partner)
Technology · Records not stated
Steam hardware shipping partner CEVA Logistics breached, exposing European customer names, addresses, order data
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Clop hacking group claimed theft of data from nearly 50 multinational firms via vulnerability exploitation
1 Aug 2026
High1 Aug 2026
Levi Strauss
Retail · Records not stated
Hackers used social engineering to access employee computers and steal corporate data
1 Aug 2026
High1 Aug 2026
Bank of Baroda
Finance · Records not stated
Cyber incident from compromised employee email account allowing unauthorized data access
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records stolen and leaked on dark web by ExfilSquad
1 Aug 2026
Critical1 Aug 2026
Thailand Digital Ministry
Government · Records not stated
221 million login records exposed, MFA mandate sought for state systems
1 Aug 2026
High1 Aug 2026
DGFiP (France)
Government · 678,000 records
678,000 records exposed including tax, business and property information
1 Aug 2026
Medium1 Aug 2026
Trezor
Technology · Records not stated
Third-party fulfillment partner breach exposed shipping addresses of 14,000 hardware wallet buyers in 7 countries
1 Aug 2026
High1 Aug 2026
Uber Freight
Technology · Records not stated
Hacking group claimed responsibility for data breach at Uber Freight logistics division
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Woeful security at criminal records office led to sensitive data leak, unable to confirm if exfiltrated
1 Aug 2026
High1 Aug 2026
Valve (via CEVA Logistics)
Technology · Records not stated
European logistics partner breached; customer names, addresses, and order data exposed for Steam hardware customers
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Large-scale data theft claimed by hacking group exploiting software vulnerabilities across multiple targets
1 Aug 2026
High1 Aug 2026
Fiserv
Finance · Records not stated
Hacking group claimed mass data theft via software vulnerability exploitation
1 Aug 2026
High1 Aug 2026
GE
Sector not stated · Records not stated
Hacking group claimed mass data theft via software vulnerability exploitation
1 Aug 2026
High1 Aug 2026
Philips
Technology · Records not stated
Hacking group claimed mass data theft via software vulnerability exploitation
1 Aug 2026
High1 Aug 2026
Shell
Sector not stated · Records not stated
Hacking group claimed mass data theft via software vulnerability exploitation
1 Aug 2026
High1 Aug 2026
Steam/CEVA Logistics
Technology · Records not stated
CEVA Logistics breach exposes names and addresses of European Steam hardware buyers
1 Aug 2026
High1 Aug 2026
LexisNexis
Legal · Records not stated
Suspicious activity detected on servers, Diligence, Metabase API, and Newsdesk services taken offline
1 Aug 2026
Medium1 Aug 2026
Trezor (Fulfilment Partner)
Technology · Records not stated
Third-party breach exposed shipping addresses of 14,000 hardware wallet buyers
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Unpatched CMS and security failures led to sensitive data leak
1 Aug 2026
Medium1 Aug 2026
Trezor (Fulfillment Partner)
Technology · Records not stated
Third-party breach exposed shipping addresses of 14,000 hardware wallet buyers in seven countries
1 Aug 2026
Critical1 Aug 2026
LiteLLM/Multiple CI/CD Platforms
Technology · Records not stated
AI supply chain attack exposed 2,500+ companies and 434,000 CI/CD pipelines; terabytes of credentials leaked
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Hacking group claimed mass data theft from multiple major corporations exploiting software vulnerabilities
1 Aug 2026
Were you affected?