Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,306
Disclosures in the tracker, all years
2,020
Of those, indexed in 2026
68
Added in October
18
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 20 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
65 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- Hong Kong16 Oct 2026AOMEI Backupper usersHow they got in: a supplier or vendor that was compromised first.The Hacker News
High14 Aug 2026
14 Aug 2026
High14 Aug 2026
Cambria Law Firm Canada
Legal · Records not stated
INC_RANSOM ransomware, firm data exfiltrated
14 Aug 2026
Medium14 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Records held in Salesforce and ServiceNow systems are under attack leaving user data exposed, according to researchers at Reco.
The attack appears similar to those perpetrated by the extortion group ShinyHunters…
14 Aug 2026
High14 Aug 2026
NHS
Healthcare · 900,000 records
STILL, NHS? Martin Bagot reports: The NHS has admitted a data breach by sending patients’ personal information over pager devices. A BBC investigation found sensitive medical data of transplant patients was routinely…
14 Aug 2026
Medium14 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
AmnesiaStealer contains novel functions, including the attackers gaining remote control over the victim’s browser to steal cookie data
14 Aug 2026
Critical14 Aug 2026
RingCentral data breach
Sector not stated · 1,600,000 records
The ShinyHunters extortion group stole personal information from 1.6 million RingCentral accounts after hacking the company in July, according to the data breach notification service monitored breach databases.
14 Aug 2026
Critical14 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Akira ransomware affiliates were seen using a new technique to evade endpoint detection and response (EDR), where they rebooted a compromised Windows system into Safe Mode with Networking enabled.
According to…
14 Aug 2026
Medium14 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The root cause of the incident is believed to be a compromised AWS access key that was exposed in publicly available JavaScript build artifacts.
The post Over 1,000 Charities Hit by Beacon CRM Data Breach appeared…
14 Aug 2026
Critical14 Aug 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
A former data analyst contractor for Brightly Software has been sentenced to two years in prison for targeting his employer in a $2.5 million extortion scheme.
14 Aug 2026
Medium14 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The Rust-based macOS infostealer harvests users’ passwords, keychain information, Chromium-based browser data, and Safari cookies.
The post AmnesiaStealer macOS Malware Steals Data, Controls Browser Sessions appeared…
14 Aug 2026
Critical14 Aug 2026
Snowflake Breach Guilty Plea
Technology · 165,000,000 records
165 orgs compromised, billions of records stolen
14 Aug 2026
Critical14 Aug 2026
Brightspeed Telecom
Technology · 1,000,000 records
1M+ customer records stolen in ransomware
14 Aug 2026
Critical14 Aug 2026
Exposed Credential Database
Technology · Records not stated
24B stolen credentials in 8.3TB public exposure
14 Aug 2026
Critical14 Aug 2026
100K+ police officer records leaked
Government · Records not stated
100K+ police officer records leaked
14 Aug 2026
Critical14 Aug 2026
General Electric
Sector not stated · Records not stated
Data stolen by Clop ransomware group
14 Aug 2026
Critical14 Aug 2026
14 Aug 2026
Critical13 Aug 2026
Unnamed medical billing company
Healthcare · 1,300,000 records
Ransomware attack exposing protected health data on 1.3 million people
13 Aug 2026
High13 Aug 2026
Personal and medical information including SSNs
Healthcare · Records not stated
Personal and medical information including SSNs exposed in data breach
13 Aug 2026
High13 Aug 2026
Sensitive data
Government · Records not stated
Sensitive data leaked due to woeful security practices and unpatched CMS
13 Aug 2026
High13 Aug 2026
Polish Energy Plant
Sector not stated · Records not stated
Heat-and-power facility supplying 50,000 residents breached via private APN
13 Aug 2026
Critical13 Aug 2026
Ticketmaster
Retail · 560,000,000 records
Data breach part of 2024 Snowflake campaign affecting 165+ companies. Hacker pleaded guilty to fraud and extortion.
13 Aug 2026
Critical13 Aug 2026
MCBS
Healthcare · 1,200,000 records
Medical business management company data breach affecting 1.2 million individuals with personal information exposed
13 Aug 2026
Critical13 Aug 2026
100K+ police officer records leaked by ExfilSquad
Government · Records not stated
100K+ police officer records leaked by ExfilSquad
13 Aug 2026
Critical13 Aug 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Patient data compromised in 2025 Cerner breach, ongoing class action lawsuit
13 Aug 2026
Were you affected?