Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,314
Disclosures in the tracker, all years
2,028
Of those, indexed in 2026
76
Added in October
22
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 20 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
69 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- Hong Kong16 Oct 2026AOMEI Backupper usersHow they got in: a supplier or vendor that was compromised first.The Hacker News
Medium7 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
BlackFile has rebranded as Redact after an alleged affiliate hijack, with Google linking the group to ongoing vishing and extortion campaigns
7 Aug 2026
Critical7 Aug 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
On March 24, 2026, developers building AI applications with LiteLLM, a Python package with 95 million monthly downloads, unknowingly installed malicious code. A threat actor group known as TeamPCP had compromised the…
7 Aug 2026
Medium7 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Initially calling itself BlackFile, the group has expanded operations to the Redact, Pink, Helix, and Falcon brands.
The post Vishing Extortion Group UNC6671 Rebrands After Making Millions appeared first on SecurityWeek.
7 Aug 2026
Critical7 Aug 2026
Exact Sciences
Healthcare · 10,869,543 records
10,869,543 records exposed, Dates of birth, Email addresses, Genders, Names and 3 more
7 Aug 2026
High7 Aug 2026
7 Aug 2026
Critical7 Aug 2026
Unlimited Systems Health IT
Healthcare · 442,000 records
442K patient records exposed in ransomware attack
7 Aug 2026
Critical7 Aug 2026
Exposed Credential Superdb
Technology · Records not stated
24B stolen credential records publicly exposed
7 Aug 2026
Critical7 Aug 2026
Basic-Fit Gym Operator
Finance · Records not stated
1M members' bank and personal data breached
7 Aug 2026
High7 Aug 2026
PNLD UK Police Network
Government · Records not stated
Police and government contacts published on dark web
7 Aug 2026
Critical7 Aug 2026
France Titres ANTS
Government · Records not stated
11.7M government portal accounts compromised
7 Aug 2026
Critical7 Aug 2026
Federal intel-sharing network
Government · Records not stated
Federal intel-sharing network breached for weeks
7 Aug 2026
Critical7 Aug 2026
NYC Health + Hospitals
Healthcare · 1,800,000 records
1.8M records with biometrics and SSNs stolen
7 Aug 2026
High6 Aug 2026
Kirkland & Ellis
Legal · Records not stated
Law firm pulled into litigation over MOVEit data breach
6 Aug 2026
High6 Aug 2026
Evolve Bank
Finance · Records not stated
Data breach affecting third-party fintech company customers including Wise
6 Aug 2026
High6 Aug 2026
T-Mobile
Technology · Records not stated
Data breach affecting hundreds of thousands of Washington customers, notification law violations
6 Aug 2026
Critical6 Aug 2026
EVO Banco/Bankinter
Finance · 1,270,000 records
1.27 million records exposed via 2024 API vulnerability; financial and identity data compromised
6 Aug 2026
Critical6 Aug 2026
U.S. Government Civil Service
Government · Records not stated
Thousands of civil servants' passwords compromised since early 2024, including White House-linked credentials
6 Aug 2026
Medium6 Aug 2026
Platinum Technology
Government · Records not stated
Data incident exposed voter information in Sangamon County; no election system impact reported
6 Aug 2026
High6 Aug 2026
Law firm (unnamed)
Legal · 13,000 records
Breach exposed hospital patient records for 13K patients in New Jersey
6 Aug 2026
High6 Aug 2026
Allstate
Finance · Records not stated
Data breach exposed employee-related records in insurance company incident
6 Aug 2026
High6 Aug 2026
Data breach
Healthcare · Records not stated
Data breach exposed SSNs and medical records of patients
6 Aug 2026
Critical6 Aug 2026
National Public Data
Sector not stated · 272,000,000 records
2024 cybersecurity incident with billions of personal records stolen and leaked
6 Aug 2026
High6 Aug 2026
Intesa Sanpaolo S.p.A.
Finance · Records not stated
Employee insider threat accessing customer data unlawfully over 2+ years; €31.8M lesson in breach transparency
6 Aug 2026
High6 Aug 2026
Capita
Technology · Records not stated
Cyber security breach resulted in £14 million ICO fine for GDPR infringements
6 Aug 2026
Were you affected?