Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,305
Disclosures in the tracker, all years
2,019
Of those, indexed in 2026
67
Added in October
19
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 19 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
65 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- Hong Kong16 Oct 2026AOMEI Backupper usersHow they got in: a supplier or vendor that was compromised first.The Hacker News
High1 Sep 2026
Questel
Retail · 1,226,209 records
1,226,209 records exposed, Email addresses, Employers, Job titles, Names and 3 more
1 Sep 2026
Critical31 Aug 2026
Berlin
Government · Records not stated
Governing Mayor Kai Wegner said on Friday that Berlin had received an extortion demand following the cyberattack, which was discovered in mid-August.
31 Aug 2026
Critical31 Aug 2026
Berlin
Government · Records not stated
Berlin's city administration has confirmed that cybercriminals are attempting to extort the city after the Rhysida ransomware gang listed it on their data leak site.
31 Aug 2026
Critical31 Aug 2026
Organisation not named
Sector not stated · 284,000,000 records
The disclosure as indexed does not name the organisation.
The ShinyHunters extortion group has claimed the theft of 284 million records from the company’s systems.
The post McKesson Confirms Data Breach as Attacker Deadline Looms appeared first on SecurityWeek.
31 Aug 2026
Critical31 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Threat actors associated with Aurora (aka Aur0ra) ransomware have been observed using SpaceX's artificial intelligence (AI)-powered coding assistant Cursor to break into target networks, according to findings from…
31 Aug 2026
Medium31 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
One of Slovenia’s largest gambling and tourism groups has begun reopening its casinos after a cyberattack forced them to shut down for several days.
31 Aug 2026
Medium31 Aug 2026
Pharmaceutical giant McKesson
Sector not stated · Records not stated
The Texas-based pharmaceutical company McKesson A cyberattack is causing service issues for the pharmaceutical and healthcare technology company McKesson informed regulators it is in the early stages of investigating a…
31 Aug 2026
Medium31 Aug 2026
FulcrumSec
Sector not stated · Records not stated
FulcrumSec says it stole over 80 GB of data from Manchester Airports Group and plans to leak it online.
The post Extortion Group Claims Manchester Airports Group Data Breach appeared first on SecurityWeek.
31 Aug 2026
Medium31 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The company has called in CrowdStrike and others to investigate the attack that caused global network disruption.
The post Boston Scientific Still Recovering From Cyberattack appeared first on SecurityWeek.
31 Aug 2026
High31 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Cloud architectures designed to withstand human attackers are facing a new threat: AI agents that rewrite the rules on the pace and scope of attacks.
The recent OpenAI incident involving Hugging Face offers an early…
31 Aug 2026
Critical31 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The Rhysida ransomware group has claimed the exfiltration of over 5TB of data, including personal information and credentials.
The post Berlin Won’t Pay Extortion Group Claiming Data Theft appeared first on SecurityWeek.
31 Aug 2026
Medium30 Aug 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
Extortion group FulcrumSec claims they stole 86GB of Manchester Airports Group data after finding API credentials exposed in client-side JavaScript. Manchester Airports Group (MAG) disclosed a data breach on August 27…
30 Aug 2026
Medium30 Aug 2026
Abigail Ham
Healthcare · Records not stated
Abigail Ham reports: The U.S. Department of Veteran’s Affairs says some veterans getting services through the White River Junction, Vt. healthcare system may have had their personal information exposed in an…
30 Aug 2026
Medium30 Aug 2026
Rick Lane
Sector not stated · Records not stated
Rick Lane reports: A massive cache of internal builds from Valve has reportedly leaked online, including beta builds of several classic Valve titles and possible weapons from Half-Life 2’s cancelled third episode.
30 Aug 2026
Medium30 Aug 2026
Anthropic
Sector not stated · Records not stated
Anthropic is warning some Claude users that infostealer malware on their PCs has stolen active Claude login sessions, allowing attackers to access accounts and consume their usage.
30 Aug 2026
Critical29 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
AJ Vicens and Raphael Satter report: U.S. officials are backpedaling on claims that several government agencies were hacked by Chinese spies, now saying that the organizations were among the hackers’ targets. In…
29 Aug 2026
Critical29 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
DPA reports: The Berlin state government has declined to comment on the demands made by hackers who targeted the city’s administrative data network two weeks ago, a spokeswoman said on Saturday. The government is…
29 Aug 2026
Critical29 Aug 2026
PEAR
Healthcare · Records not stated
SuspectFile reports: A cyberattack against a Texas healthcare organization allegedly resulted in the exfiltration of approximately 1.4 TB of data, according to claims made by the ransomware group PEAR. The alleged…
29 Aug 2026
Medium29 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
A cyberattack caused disruptions at the toy and game giant earlier this year and the company is now disclosing a data breach.
The post Hasbro Data Breach Exposed Employee Personal Information appeared first on…
29 Aug 2026
Critical29 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Berlin ‘s government faces a Rhysida ransomware attack weeks before elections, with officials refusing to pay despite a claimed 5.79 TB data theft. Berlin’s state government confirmed this week it’s…
29 Aug 2026
Medium29 Aug 2026
An alleged Chinese-speaking actor
Sector not stated · Records not stated
An alleged Chinese-speaking actor breached Philippine nuclear and naval targets by exploiting known flaws, stealing sensitive data. A suspected Chinese-speaking operator targeted a Philippine nuclear research body and…
29 Aug 2026
Critical29 Aug 2026
McKesson is
Healthcare · 284,000,000 records
Lawrence Abrams reports: Healthcare and pharmaceutical distribution giant McKesson has disclosed a cybersecurity incident involving unauthorized access to third-party applications and data theft, with the ShinyHunters…
29 Aug 2026
Critical29 Aug 2026
Berlin's state government has
Government · Records not stated
Berlin's state government has confirmed that it is the target of an extortion attempt following the August compromise of the city's state administrative network, and said it will not meet the extortionists' demands.…
29 Aug 2026
Critical28 Aug 2026
McKesson
Healthcare · 284,000,000 records
Healthcare and pharmaceutical distribution giant McKesson has disclosed a cybersecurity incident involving unauthorized access to third-party applications and data theft, with the ShinyHunters extortion group claiming…
28 Aug 2026
Were you affected?