Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,328
Disclosures in the tracker, all years
2,042
Of those, indexed in 2026
95
Added in October
22
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 23 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
72 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United Kingdom16 Oct 2026Southville Primary School (Bristol City Council area)The source does not say how they got in.Hits Radio (West of England)
Critical1 Apr 2026
Instructure Canvas
Education · 275,000,000 records
ShinyHunters breach claimed 275 million records from 8,809 schools, exposing student and staff data
1 Apr 2026
High1 Apr 2026
CISA/Unnamed US Federal Department
Government · Records not stated
Breach via Cisco vulnerability with FIRESTARTER backdoor malware allowing access through March
1 Apr 2026
High1 Apr 2026
US Department (CISA)
Government · Records not stated
Breached through Cisco vulnerability; FIRESTARTER backdoor allowed access through March 2026
1 Apr 2026
High1 Apr 2026
Ransomware attack affected 169,000 patients across two facilities
Healthcare · 169,000 records
Ransomware attack affected 169,000 patients across two facilities
1 Apr 2026
Critical1 Apr 2026
CISA/US Department
Government · Records not stated
US agency breached through Cisco vulnerability, FIRESTARTER backdoor allowed access through March
1 Apr 2026
High1 Apr 2026
Vercel
Technology · Records not stated
OAuth supply chain compromise exposing environment variables through trusted third-party apps
1 Apr 2026
Critical1 Apr 2026
ANTS (France Identity Agency)
Government · 19,000,000 records
19 million records exposed in cyberattack on French national ID agency
1 Apr 2026
Critical1 Apr 2026
ANTS (French Identity Agency)
Government · 19,000,000 records
19 million records exposed in cyberattack on France's national identity agency
1 Apr 2026
High1 Apr 2026
Mexican Government (9 agencies)
Government · Records not stated
Single hacker exploited Claude Code and OpenAI platforms to breach 9 Mexican government agencies
1 Apr 2026
High1 Apr 2026
SISVISA (Brazil)
Healthcare · Records not stated
102,215 Brazilian health surveillance records leaked including IDs and tax data
1 Apr 2026
High1 Apr 2026
Marquis
Technology · 788,000 records
Ransomware attack exposed 672,000-788,000 records; names, addresses, card numbers stolen
1 Apr 2026
High1 Apr 2026
Adams County
Government · Records not stated
Ransomware attack crippled county servers, week-long restoration
1 Apr 2026
High1 Apr 2026
Laurel Eye Clinic
Healthcare · Records not stated
Security incident exposed patient data in ransomware attack
1 Apr 2026
Critical1 Apr 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
24 billion exposed records including usernames, passwords, URLs from infostealer malware
1 Apr 2026
High1 Apr 2026
Adams County Government
Government · Records not stated
Ransomware attack disabled county systems for over a week; $250K restoration
1 Apr 2026
Critical1 Apr 2026
Organisation not named
Technology · 165,000,000 records
The disclosure as indexed does not name the organisation.
165 organizations breached via compromised Snowflake credentials; ShinyHunters exploited Anodot access
1 Apr 2026
High1 Apr 2026
Bol (Dutch retailer)
Retail · Records not stated
Third-party logistics partner breach affecting online retailer operations
1 Apr 2026
High1 Apr 2026
Valley Kidney Specialists
Healthcare · Records not stated
Data breach compromised personal and health information of patients
1 Apr 2026
Critical1 Apr 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
US agency breached through Cisco vulnerability; FIRESTARTER backdoor allowed access through March
1 Apr 2026
Critical1 Apr 2026
Department for Education
Government · 607,000 records
Cyberattack exposed approximately 607,000 records
1 Apr 2026
High1 Apr 2026
bol.com
Retail · Records not stated
Third-party logistics partner hacked, affecting online retailer's operations and customer data
1 Apr 2026
Critical1 Apr 2026
France ANTS
Government · 19,000,000 records
Major cyberattack on national identity agency exposed 19 million records with personal data
1 Apr 2026
Critical1 Apr 2026
UK BioBank
Healthcare · Records not stated
Confidential health records from 500k Britons exposed and offered for sale on Chinese website
1 Apr 2026
High1 Apr 2026
Allstate
Finance · Records not stated
Breach exposed employee-related records, part of pattern targeting insurers
1 Apr 2026
Were you affected?