Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,306
Disclosures in the tracker, all years
2,020
Of those, indexed in 2026
69
Added in October
19
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 20 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
68 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United Kingdom16 Oct 2026Southville Primary School (Bristol City Council area)The source does not say how they got in.Hits Radio (West of England)
- United Kingdom13 Oct 2026TFG LondonThe source does not say how they got in.BleepingComputer
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Woeful security at criminal records office led to sensitive data leak, unable to confirm if exfiltrated
1 Aug 2026
High1 Aug 2026
Valve (via CEVA Logistics)
Technology · Records not stated
European logistics partner breached; customer names, addresses, and order data exposed for Steam hardware customers
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Large-scale data theft claimed by hacking group exploiting software vulnerabilities across multiple targets
1 Aug 2026
High1 Aug 2026
Fiserv
Finance · Records not stated
Hacking group claimed mass data theft via software vulnerability exploitation
1 Aug 2026
High1 Aug 2026
GE
Sector not stated · Records not stated
Hacking group claimed mass data theft via software vulnerability exploitation
1 Aug 2026
High1 Aug 2026
Philips
Technology · Records not stated
Hacking group claimed mass data theft via software vulnerability exploitation
1 Aug 2026
High1 Aug 2026
Shell
Sector not stated · Records not stated
Hacking group claimed mass data theft via software vulnerability exploitation
1 Aug 2026
High1 Aug 2026
Steam/CEVA Logistics
Technology · Records not stated
CEVA Logistics breach exposes names and addresses of European Steam hardware buyers
1 Aug 2026
High1 Aug 2026
LexisNexis
Legal · Records not stated
Suspicious activity detected on servers, Diligence, Metabase API, and Newsdesk services taken offline
1 Aug 2026
Medium1 Aug 2026
Trezor (Fulfilment Partner)
Technology · Records not stated
Third-party breach exposed shipping addresses of 14,000 hardware wallet buyers
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Unpatched CMS and security failures led to sensitive data leak
1 Aug 2026
Medium1 Aug 2026
Trezor (Fulfillment Partner)
Technology · Records not stated
Third-party breach exposed shipping addresses of 14,000 hardware wallet buyers in seven countries
1 Aug 2026
Critical1 Aug 2026
LiteLLM/Multiple CI/CD Platforms
Technology · Records not stated
AI supply chain attack exposed 2,500+ companies and 434,000 CI/CD pipelines; terabytes of credentials leaked
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Hacking group claimed mass data theft from multiple major corporations exploiting software vulnerabilities
1 Aug 2026
Critical1 Aug 2026
LiteLLM (Supply chain)
Technology · Records not stated
2,500+ companies and 434,000 CI/CD pipelines exposed in AI supply chain breach
1 Aug 2026
High1 Aug 2026
CEVA Logistics (Valve partner)
Technology · Records not stated
Names, addresses, and order data of Steam hardware customers in Europe exposed
1 Aug 2026
High1 Aug 2026
Comcast
Technology · 35,000,000 records
Xfinity data breach exposed personal information; Comcast settled class-action lawsuit for $117.5 million
1 Aug 2026
Medium1 Aug 2026
CEVA Logistics / Steam
Technology · Records not stated
CEVA Logistics breach exposed names and addresses of European Steam hardware buyers
1 Aug 2026
Critical1 Aug 2026
Thailand Digital Ministry Systems
Government · Records not stated
221 million login records exposed; MFA mandate sought after identification of breach
1 Aug 2026
Critical1 Aug 2026
Metabase
Technology · Records not stated
ShinyHunters claims hack days after zero-day vulnerability exposed connected databases
1 Aug 2026
Critical1 Aug 2026
LiteLLM/Multiple Organizations
Technology · Records not stated
AI supply chain breach exposed 2500+ companies and 434,000 CI/CD pipelines; terabytes of credentials leaked
1 Aug 2026
High1 Aug 2026
Unpatched CMS and missed
Government · Records not stated
Unpatched CMS and missed alerts led to sensitive data leak
1 Aug 2026
High1 Aug 2026
Coca-Cola (Fairlife)
Retail · Records not stated
Ransomware attack shut down dairy operations; $4 billion brand impacted
1 Aug 2026
High1 Aug 2026
Valve/CEVA Logistics
Technology · Records not stated
Data breach at CEVA Logistics (Valve's European logistics partner) exposed customer names, addresses, and order data
1 Aug 2026
Were you affected?