Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,319
Disclosures in the tracker, all years
2,034
Of those, indexed in 2026
87
Added in October
21
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 22 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Critical9 Jul 2026
KDDI Japan Telecom
Technology · 14,200,000 records
14.2M email credentials exposed across six ISPs
9 Jul 2026
Critical9 Jul 2026
NYC Health Hospitals
Healthcare · 1,800,000 records
1.8M patient records leaked including biometrics
9 Jul 2026
Critical9 Jul 2026
ADT Security
Sector not stated · 30,814 records
5.5M unique emails and PII leaked after breach
9 Jul 2026
Critical9 Jul 2026
Conduent
Government · 62,200,000 records
62.2M records exposed including SSNs and medical data
9 Jul 2026
Critical9 Jul 2026
KDDI Six ISPs Japan
Technology · 14,200,000 records
14.2M email credentials exposed in plaintext
9 Jul 2026
Critical9 Jul 2026
NAIC Insurance Regulators
Finance · 12,000 records
3.1TB stolen via Oracle PeopleSoft zero-day
9 Jul 2026
High9 Jul 2026
Acworth City Government
Government · Records not stated
Government systems hit by INC_RANSOM ransomware
9 Jul 2026
High9 Jul 2026
9 Jul 2026
High9 Jul 2026
Eurail Interrail
Sector not stated · Records not stated
300K traveler passports and IBANs exposed
9 Jul 2026
Critical9 Jul 2026
Global Infostealer Credential Dump
Sector not stated · Records not stated
24B stolen credentials exposed online
9 Jul 2026
Critical9 Jul 2026
NYC Health and Hospitals
Healthcare · 1,800,000 records
1.8M records stolen including biometrics
9 Jul 2026
Critical9 Jul 2026
Conduent Business Services
Sector not stated · 62,200,000 records
62.2M records exposed in ransomware attack
9 Jul 2026
Medium8 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The threat actor claiming responsibility says they stole source code, encryption keys and more.
8 Jul 2026
Medium8 Jul 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
A financially motivated operation uses lures of cracked or pirated software to deliver a malware two-for-one combo for data theft and cryptomining.
8 Jul 2026
Medium8 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
For years, account takeover (ATO) followed a predictable script. Attackers bought stolen credentials in bulk, ran them through automated tools, and waited for matches. Credential stuffing was cheap, scalable, and for…
8 Jul 2026
Medium8 Jul 2026
The professional services giant
Sector not stated · Records not stated
The professional services giant says it contained the incident, remediated its source, and experienced no operational or service delivery impact.
The post Accenture Confirms Data Breach After Hacker Claims Source Code…
8 Jul 2026
Critical8 Jul 2026
Telco giant KDDI
Technology · Records not stated
Japanese telecommunications giant KDDI says that millions of people had their email addresses and passwords exposed after attackers breached an email platform used by five internet service providers (ISPs) in the…
8 Jul 2026
High8 Jul 2026
Tchap French Gov Messenger
Government · Records not stated
73K government accounts and 643K messages stolen
8 Jul 2026
Critical8 Jul 2026
HSIN security platform
Government · Records not stated
HSIN security platform breached by unauthorized party
8 Jul 2026
High8 Jul 2026
Aesthetic Surgical Images
Healthcare · Records not stated
Patient records stolen by INC_RANSOM
8 Jul 2026
Medium8 Jul 2026
8 Jul 2026
Critical8 Jul 2026
NYC Health Hospitals
Healthcare · 1,800,000 records
1.8M records stolen including biometrics
8 Jul 2026
Critical8 Jul 2026
8 Jul 2026
Critical8 Jul 2026
KDDI Corporation
Technology · 14,200,000 records
14.2M email credentials exposed across 6 ISPs
8 Jul 2026
Were you affected?