Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,324
Disclosures in the tracker, all years
2,038
Of those, indexed in 2026
86
Added in October
22
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 21 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
72 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- Germany21 Oct 2026IQ.LvbsThe source does not say how they got in.The Register
High1 Jul 2026
Chick-fil-A
Retail · Records not stated
Hackers accessed customer loyalty accounts using stolen usernames and passwords
1 Jul 2026
High1 Jul 2026
Clover Health
Healthcare · Records not stated
Health insurer disclosed data breach; data type and victim count not yet determined
1 Jul 2026
High1 Jul 2026
Craneware
Healthcare · Records not stated
Hospital software vendor breach exposed healthcare customer data through supply-chain attack
1 Jul 2026
High1 Jul 2026
River Financial Corporation
Finance · Records not stated
Ransomware attack; hackers deleted stolen data after ransom demand; confirmed data deletion
1 Jul 2026
Critical1 Jul 2026
Instructure (Canvas platform)
Education · Records not stated
Supply chain breach generating majority of 2026 breach notices
1 Jul 2026
High1 Jul 2026
Ransomware attack disrupted systems operations
Sector not stated · Records not stated
Ransomware attack disrupted systems operations
1 Jul 2026
Critical1 Jul 2026
Comcast Xfinity
Technology · 35,000,000 records
Cyberattack exposes personal information of Xfinity customers; $117.5M settlement reached
1 Jul 2026
High1 Jul 2026
LVM (Latvian State Forestry)
Sector not stated · Records not stated
Ransomware attack, systems still being restored weeks after incident
1 Jul 2026
High1 Jul 2026
DHS (Homeland Security)
Government · Records not stated
Network intrusion on Homeland Security Information Network supporting World Cup operations confirmed
1 Jul 2026
High1 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Network intrusion on Homeland Security Information Network supporting World Cup infrastructure
1 Jul 2026
High1 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack attributed to foreign financially motivated threat group
1 Jul 2026
High1 Jul 2026
LVM (Latvian Forestry)
Sector not stated · Records not stated
Ransomware attack by foreign financially motivated group disrupted forestry operations
1 Jul 2026
High1 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack attributed to foreign financially motivated group; systems restoration ongoing
1 Jul 2026
High1 Jul 2026
Network intrusion on Homeland Security Information Network
Government · Records not stated
Network intrusion on Homeland Security Information Network confirmed after being ruled false positive twice
1 Jul 2026
High1 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Network intrusion on Homeland Security Information Network confirmed after twice ruled false positive
1 Jul 2026
High1 Jul 2026
LVM (Latvian Forestry Company)
Sector not stated · Records not stated
Ransomware attack attributed to foreign financially motivated group
1 Jul 2026
High1 Jul 2026
LVM (Latvian forestry company)
Sector not stated · Records not stated
Ransomware attack by foreign financially motivated group; systems still being restored
1 Jul 2026
High1 Jul 2026
Network intrusion on Homeland Security Information Network
Government · Records not stated
Network intrusion on Homeland Security Information Network confirmed after two false positive rulings
1 Jul 2026
Critical1 Jul 2026
FortiBleed/Fortinet
Technology · Records not stated
73,932 FortiGate firewall administrative and VPN credentials exposed via credential exposure campaign
1 Jul 2026
High1 Jul 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Patient records stolen in cyberattack affecting 21 clinics, personal info and medical notes exposed
1 Jul 2026
Critical1 Jul 2026
Network intrusion
Government · Records not stated
Network intrusion confirmed on Homeland Security Information Network
1 Jul 2026
High1 Jul 2026
LastPass
Technology · Records not stated
Data breach at third-party vendor exposed customer data; latest breach confirmed
1 Jul 2026
High1 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Network intrusion on Homeland Security Information Network; initially ruled false positive twice
1 Jul 2026
Critical1 Jul 2026
Partnered Clinics (Australia)
Healthcare · Records not stated
Cyber-attack exposed Medicare numbers, treatment details, pathology results of patients
1 Jul 2026
Were you affected?