Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,314
Disclosures in the tracker, all years
2,028
Of those, indexed in 2026
76
Added in October
21
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 21 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Twelve months
Disclosures indexed each month.
Counted on the date each disclosure was recorded in the index. The current month is shown in red and is still open. A phone shows the last six months.
Worldwide · How they got in
Incidents worldwide, by country.
72 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- India20 Oct 2026EMudhraThe source does not say how they got in.The Hacker News
Medium20 Oct 2026
PHP
Sector not stated · Records not stated
The PHP security team is warning administrators to prepare for emergency security updates tomorrow to address two critical vulnerabilities, as information about the flaws has reportedly leaked ahead of their scheduled…
20 Oct 2026
High20 Oct 2026
Organisation not named
Healthcare · 5,461 records
The disclosure as indexed does not name the organisation.
Data breach affected 5,461 patients, exposing sensitive health information.
20 Oct 2026
Medium20 Oct 2026
California
Government · Records not stated
The CDE released multiple statements over the last week warning the state’s students that assessment contractor Educational Testing Service (ETS) suffered a months-long data breach.
20 Oct 2026
Medium20 Oct 2026
Ahold Delhaize
Retail · Records not stated
Ahold Delhaize, one of the world's largest food retail chains, confirmed that last week's cyberattack disrupted services at stores across Europe and the United States.
20 Oct 2026
Medium20 Oct 2026
Assurance Retraite
Government · 70,372 records
70,372 records exposed, Dates of birth, Email addresses, Family members' names, Government issued IDs and 5 more
20 Oct 2026
Critical19 Oct 2026
Nikkei
Sector not stated · 1,800,000 records
Nikkei Inc. disclosed a new data breach, the third in about a month, that exposed 1.83 million personal information records.
19 Oct 2026
Medium19 Oct 2026
OpenCode hack
Technology · Records not stated
The open-source AI coding project OpenCode has notified a small number of users that API keys they used with external providers were exposed in a security breach.
19 Oct 2026
Medium19 Oct 2026
ConnectWise backup credentials
Finance · Records not stated
ConnectWise has disabled key cloud services and is investigating unauthorized access to customers’ Microsoft 365 environments after a credential tied to its Cloud Backup platform was compromised and used to…
19 Oct 2026
Medium19 Oct 2026
Ahold Delhaize
Sector not stated · Records not stated
Ahold Delhaize, the Dutch multinational grocery retailer, said Monday that a cyberattack forced it to take systems offline across most of its U.S. and European brands, impacting shoppers on both sides of the Atlantic.
19 Oct 2026
Critical18 Oct 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter IronChain Ransomware Threatens Businesses with Permanent Data…
18 Oct 2026
High18 Oct 2026
Organisation not named
Education · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack on UIC College of Medicine resulted in theft of some information.
18 Oct 2026
Medium18 Oct 2026
Unnamed UK airport
Sector not stated · Records not stated
Ransomware attackers released stolen data from cyberattack on a UK airport.
18 Oct 2026
Critical18 Oct 2026
Personal information of 3 million people
Government · 3,000,000 records
Personal information of 3 million people exposed in breach of Pentagon personnel agency.
18 Oct 2026
High18 Oct 2026
Asos
Retail · Records not stated
Breach exposed customer data beyond basic contact details, per BBC investigation after hackers claimed to have taken more information than first disclosed.
18 Oct 2026
High18 Oct 2026
Utility account data
Sector not stated · 400,000 records
Utility account data breached, affecting roughly 400,000 customers of Georgia Power and Alabama Power.
18 Oct 2026
High18 Oct 2026
Driver records
Government · Records not stated
Driver records breached; state is mailing breach notification letters and offering affected drivers $1M identity theft insurance and credit monitoring.
18 Oct 2026
Medium18 Oct 2026
Gîtes de France
Retail · 117,574 records
117,574 records exposed, Booking details, Email addresses, Names, Phone numbers and 1 more
18 Oct 2026
Critical16 Oct 2026
Baltimore suburb
Government · Records not stated
Anne Arundel County, Maryland, said an intruder stole files from government systems, and investigators are working to assess how much data was exposed.
16 Oct 2026
Critical16 Oct 2026
Organisation not named
Sector not stated · 11,000,000 records
The disclosure as indexed does not name the organisation.
Burger King Japan, the Japanese subsidiary of global fast-food giant Burger King, disclosed a major data breach after attackers accessed a server containing 11.18 million customer records.
16 Oct 2026
Medium15 Oct 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
France-based operators of Danfoss refrigeration controllers have sharply reduced their internet exposure after the October 11 cyber-attack
15 Oct 2026
Critical15 Oct 2026
Ransomware Attacks Intensify
Sector not stated · Records not stated
Guru Baran reports: Ransomware gangs are moving beyond locked files and stolen data. Criminals now threaten employees, executives, and their families to force companies to pay. According to the Semperis 2026 Ransomware…
15 Oct 2026
High14 Oct 2026
Crunchbase
Technology · 559,908 records
559,908 records exposed, Email addresses, Employers, Job titles, Names and 3 more
14 Oct 2026
Medium13 Oct 2026
Russian internet provider SkyNet
Sector not stated · Records not stated
One of St. Petersburg's major internet providers said its network had been under a distributed denial-of-service (DDoS) attack since October 6, affecting services including online gaming, voice calls and video…
13 Oct 2026
Medium13 Oct 2026
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
The South African retail giant The Foschini Group (TFG) disclosed a cyberattack that disrupted IT systems at three of its British fashion brands, leaving some services unavailable.
13 Oct 2026
Were you affected?