Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,318
Disclosures in the tracker, all years
2,033
Of those, indexed in 2026
86
Added in October
20
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 22 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
72 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United Kingdom16 Oct 2026Southville Primary School (Bristol City Council area)The source does not say how they got in.Hits Radio (West of England)
- United Kingdom13 Oct 2026TFG LondonThe source does not say how they got in.BleepingComputer
High1 Jun 2026
Valley Kidney Specialists
Healthcare · Records not stated
Data breach exposed personal and health information from medical records
1 Jun 2026
Critical1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen in major ransomware attack disrupting healthcare services
1 Jun 2026
Critical1 Jun 2026
Partnered Health (Australian clinics)
Healthcare · Records not stated
Medical records breached including Medicare numbers, treatment details, and pathology results exposed on dark web.
1 Jun 2026
High1 Jun 2026
Hugging Face
Technology · Records not stated
Internal datasets and credentials compromised in breach, users urged to rotate access tokens
1 Jun 2026
High1 Jun 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Police and government contact details including names and emails leaked on dark web
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen during major ransomware attack affecting healthcare services
1 Jun 2026
Critical1 Jun 2026
Department for Education (DfE)
Government · 607,000 records
Cyber attack exposed 607,000 records
1 Jun 2026
High1 Jun 2026
Coca-Cola (Dairy Operations)
Retail · Records not stated
Ransomware attack shut down dairy operations; data breach disclosed to SEC
1 Jun 2026
High1 Jun 2026
Synnovis
Healthcare · 900,000 records
Thousands of NHS patient records stolen during major ransomware attack affecting Mid South Essex Foundation Trust
1 Jun 2026
Critical1 Jun 2026
Amgen
Healthcare · Records not stated
Patient health data and IP stolen in cybersecurity breach; cloud environment compromised
1 Jun 2026
Critical1 Jun 2026
Origin Energy
Sector not stated · 2,000,000 records
Customer data leak in cyberattack; 2 million records stolen
1 Jun 2026
Critical1 Jun 2026
Coca-Cola (Fairlife)
Retail · Records not stated
Ransomware attack shut down dairy operations; disclosure filed with SEC
1 Jun 2026
High1 Jun 2026
Huntsville Hospital Health System
Healthcare · Records not stated
Personal health information of patients compromised through third-party data breach
1 Jun 2026
High1 Jun 2026
Data breach
Legal · 13,000 records
Data breach exposed hospital records of nearly 13,000 patients in New Jersey through cyberattack on law firm
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen during major ransomware attack disrupting healthcare services
1 Jun 2026
High1 Jun 2026
Essex NHS Trust
Healthcare · 900,000 records
Thousands of patient records stolen in cyber attack; disclosure more than six months after notification
1 Jun 2026
Critical1 Jun 2026
Department for Education
Government · 607,000 records
Cyber attack exposed approximately 607,000 records
1 Jun 2026
Critical1 Jun 2026
Fortinet FortiGate
Technology · Records not stated
FortiBleed exposed verified admin credentials for 73,000+ firewall and VPN devices
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen in major ransomware cyberattack
1 Jun 2026
Critical1 Jun 2026
Unknown (Elasticsearch database)
Sector not stated · Records not stated
Publicly exposed Elasticsearch database leaked 24 billion stolen credentials; largest infostealer log compilation
1 Jun 2026
Critical1 Jun 2026
Medical billing company (unnamed)
Healthcare · 1,300,000 records
Ransomware attack exposed 1.3M people's protected health data leaked to dark web in 2025
1 Jun 2026
High1 Jun 2026
Ernst & Young (EY)
Finance · Records not stated
Tax client data exposed via third-party vendor breach with 81-day delay in notifying customers
1 Jun 2026
High1 Jun 2026
FirstClass Travel
Sector not stated · Records not stated
Customer records allegedly breached at Australian travel agency
1 Jun 2026
High1 Jun 2026
Ernst & Young
Finance · Records not stated
Third-party vendor breach exposed tax client data after 81-day delay in notification
1 Jun 2026
Were you affected?