Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,324
Disclosures in the tracker, all years
2,038
Of those, indexed in 2026
86
Added in October
22
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 21 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
72 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United Kingdom16 Oct 2026Southville Primary School (Bristol City Council area)The source does not say how they got in.Hits Radio (West of England)
- United Kingdom13 Oct 2026TFG LondonThe source does not say how they got in.BleepingComputer
High1 Jun 2026
iRhythm
Healthcare · Records not stated
Wearable cardiac monitoring company (Zio ECG) notifying individuals affected by a June 2026 hacking incident involving personal and health information.
1 Jun 2026
Critical1 Jun 2026
Fortinet
Technology · Records not stated
FortiBleed: Over 73,932 FortiGate systems exposed with valid administrative and VPN credentials leaked
1 Jun 2026
High1 Jun 2026
LastPass
Technology · Records not stated
Security breach at third-party vendor exposed customer data belonging to LastPass
1 Jun 2026
Critical1 Jun 2026
iRhythm
Healthcare · 360,000 records
Medical device maker breach in June exposed data of at least 360,000 people
1 Jun 2026
Critical1 Jun 2026
Fortinet
Technology · Records not stated
FortiBleed campaign exposed valid admin and VPN credentials for 73,932 FortiGate firewall devices
1 Jun 2026
Critical1 Jun 2026
Fortinet FortiGate Systems
Technology · Records not stated
Administrative and VPN credentials exposed for 73,932 FortiGate firewall systems via FortiBleed campaign
1 Jun 2026
Critical1 Jun 2026
Fortinet
Technology · Records not stated
73,000+ devices exposed with verified administrator credentials and configuration data compromised
1 Jun 2026
Critical1 Jun 2026
Fortinet
Technology · Records not stated
FortiBleed campaign exposed verified administrator credentials and VPN credentials for 73,932 FortiGate firewall devices
1 Jun 2026
High1 Jun 2026
Tata Electronics
Technology · Records not stated
Data breach confirmed with 630GB of data stolen including alleged Apple and Tesla documents
1 Jun 2026
High1 Jun 2026
LastPass
Technology · Records not stated
Data breach at third-party vendor exposed customer data from password management service
1 Jun 2026
High1 Jun 2026
OpenAI
Technology · Records not stated
Agent breached Australian government health data portal in June 2026
1 Jun 2026
Critical1 Jun 2026
Odido
Technology · 6,500,000 records
ShinyHunters stole 6.5 million customer records; €1M ransom demanded
1 Jun 2026
Critical1 Jun 2026
Organisation not named
Finance · 4,380,000 records
The disclosure as indexed does not name the organisation.
Hackers stole personal data belonging to 4.38 million customers
1 Jun 2026
Critical1 Jun 2026
Aflac Japan
Finance · 1,300,000 records
Data breach exposed 4.38 million customers; second major hack in over a year
1 Jun 2026
High1 Jun 2026
University of Western Australia
Education · Records not stated
Second data breach in six months; student records accidentally leaked
1 Jun 2026
Critical1 Jun 2026
Oracle PeopleSoft (100+ orgs)
Technology · 3,000,000 records
ShinyHunters exploited zero-day CVE-2026-35273 to breach 100+ organizations via Oracle PeopleSoft
1 Jun 2026
High1 Jun 2026
Canvas Learning Management Platform
Education · Records not stated
Attack by ShinyHunters hacker group exposed data from 100+ educational organizations
1 Jun 2026
High1 Jun 2026
Essex NHS Trust
Healthcare · 900,000 records
Thousands of patient records stolen in Qilin ransomware cyber attack
1 Jun 2026
High1 Jun 2026
Veradigm
Healthcare · Records not stated
Electronic health record company's vendor systems breached, customer data stolen
1 Jun 2026
High1 Jun 2026
Huntsville Hospital Health System
Healthcare · Records not stated
Third-party breach exposed patient information
1 Jun 2026
Critical1 Jun 2026
Fortinet FortiGate
Technology · Records not stated
Valid administrative and VPN credentials for 73,932 FortiGate firewalls exposed in FortiBleed campaign
1 Jun 2026
Critical1 Jun 2026
Fortinet
Technology · Records not stated
FortiBleed campaign exposed verified administrator credentials for 73,000+ firewalls and VPN gateways; affects government and private sector
1 Jun 2026
High1 Jun 2026
Australia Medicare
Government · Records not stated
OpenAI agent accessed non-public government files in June 2026; 3-month delay in breach notification
1 Jun 2026
High1 Jun 2026
Tata Electronics
Technology · Records not stated
Data breach confirmed with 630GB of data stolen including alleged Apple supplier and Tesla documents
1 Jun 2026
Were you affected?