Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,301
Disclosures in the tracker, all years
2,016
Of those, indexed in 2026
67
Added in October
19
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 19 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
65 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- Hong Kong16 Oct 2026AOMEI Backupper usersHow they got in: a supplier or vendor that was compromised first.The Hacker News
Critical25 Aug 2026
Hospital operator Nutex Health
Healthcare · Records not stated
Healthcare and services provider Nutex is investigating a data breach incident where an unauthorized third party exfiltrated information from company servers.
25 Aug 2026
Medium24 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
The disruption took place amid a wave of attacks targeting vulnerable industrial devices in the water and energy sectors.
24 Aug 2026
Critical24 Aug 2026
A breach at South Korea's government-backed startup platform
Government · Records not stated
A breach at South Korea's government-backed startup platform exposed encrypted personal data after an encryption key was included in an API. Penta Security explains why encryption keys must be securely managed and kept…
24 Aug 2026
Medium24 Aug 2026
Eduard Kovacs
Technology · Records not stated
Eduard Kovacs reports: Private equity giant Apollo Global Management has disclosed a data breach that exposed sensitive personal information. According to a data breach notice sent to affected individuals, a social…
24 Aug 2026
Medium24 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Yesterday, DataBreaches reported that ShinyHunters had added ReliaQuest to its dedicated leak site, but without any substantive proof, only a few screenshots showing access to a user account on…
24 Aug 2026
High24 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
The private equity firm appears to have been targeted as part of a campaign focusing on major financial companies.
The post Personal Information Exposed in Apollo Global Data Breach appeared first on SecurityWeek.
24 Aug 2026
Medium23 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
UPDATE: Yesterday, DataBreaches reported that ShinyHunters had added ReliaQuest to its dedicated leak site, but without any substantive proof, only a few screenshots showing access to a user account on reliaquest.
23 Aug 2026
High23 Aug 2026
NIUS
Finance · 6,090 records
6,090 records exposed, Bank account numbers, Email addresses, Names, Partial credit card data and 2 more
23 Aug 2026
Critical23 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Akira Hits Safe Mode: Ransomware Rebooting Around EDR…
23 Aug 2026
Medium23 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Iran-linked hackers shut down a UK power plant for four days in the first confirmed attack of its kind, concurrent with water infrastructure attacks across 12 US states. Iran-linked hackers shut down a British power…
23 Aug 2026
Critical23 Aug 2026
MCBS
Healthcare · 1,200,000 records
Data breach affecting 1.2M individuals at Atlanta-based medical business management company
23 Aug 2026
Medium22 Aug 2026
Connecticut
Healthcare · Records not stated
WSFB reports: State officials say a data breach involving the Connecticut Medicaid program’s provider portal exposed payment and claims information tied to roughly 41,000 HUSKY Health members. The Connecticut…
22 Aug 2026
High22 Aug 2026
Golf Canada
Technology · 568,972 records
568,972 records exposed, Dates of birth, Email addresses, Genders, Geographic locations and 2 more
22 Aug 2026
High21 Aug 2026
Organisation not named
Legal · Records not stated
The disclosure as indexed does not name the organisation.
In April, Silent Ransom Group’s (SRG)* leak site listed 38 law firms that had not paid them and whose data was leaked. By June 29, there were 48 law firms. Now there are 64, and, in somewhat surprising claims…
21 Aug 2026
Critical21 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware remains one of the most disruptive cyber threats organizations face. Companies have strengthened their cyber defenses over the years, but attackers in 2026 have become faster, more targeted, and increasingly…
21 Aug 2026
Medium21 Aug 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
The statement came a day after a hacking group calling itself Black Spark claimed it had spent more than a month inside Microolap’s network and gained access to its internal systems, including EtherSensor, the…
21 Aug 2026
Critical21 Aug 2026
SickKids data breach
Healthcare · Records not stated
Toronto's Hospital for Sick Children (SickKids) says a cybersecurity incident exposed the personal information of some current and former employees and job applicants, stemming from a flaw in third-party software.…
21 Aug 2026
High20 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Support is growing for stricter oversight and increased financial resources for utilities in the wake of a cyberattack spree, suspected to be the work of Iran-linked threat groups.
20 Aug 2026
Medium20 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Hackers compromised the maintainer account behind the widely used Rust crate arrayref to introduce malware that executed on developers' systems during compilation.
20 Aug 2026
High20 Aug 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Amar Ćemanović reports: Apple American Group LLC, a major Applebee’s franchise operator in the United States, has disclosed a data breach incident. The event has reportedly exposed sensitive personal information…
20 Aug 2026
Medium20 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
In March 2026, an internal AI agent at Meta triggered a “Sev 1” incident after sensitive company and user data was exposed to employees who weren’t authorized to access it.
The incident began when a Meta…
20 Aug 2026
Critical20 Aug 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
StopAndProtect turned nearly 2,000 hacked WordPress sites into a criminal network for malware delivery, data theft, surveillance and ransomware. Check Point Research uncovered a cybercrime operation, dubbed…
20 Aug 2026
Critical19 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
A suspected ransomware affiliate is posing as a ransomware recovery service called "Ransom Busters," contacting the victims before the attacks become public and claiming to be able to provide decryption keys and delete…
19 Aug 2026
Critical19 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
A suspected ransomware affiliate is posing as a ransomware recovery service called "Ransom Busters," contacting the victims before the attacks become public and claiming to be able to provide decryption keys and delete…
19 Aug 2026
Were you affected?