Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,324
Disclosures in the tracker, all years
2,038
Of those, indexed in 2026
86
Added in October
22
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 21 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
72 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- India20 Oct 2026EMudhraThe source does not say how they got in.The Hacker News
High2 Sep 2026
The US healthcare provider
Healthcare · Records not stated
The US healthcare provider confirmed that sensitive patient and employee data, alongside financial and business information, were exfiltrated by a third party
2 Sep 2026
High2 Sep 2026
Manchester Airports Group
Government · 8,728,451 records
8,728,451 records exposed, Browser user agent details, Email addresses, Geographic locations, IP addresses and 4 more
2 Sep 2026
Critical1 Sep 2026
U.S. Department of Defense (Pentagon)
Government · Records not stated
Breach exposed sensitive personal data, including Social Security numbers and job details, of nearly 3 million current and former military personnel.
1 Sep 2026
Critical1 Sep 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
A malicious actor accessed driver license and motor vehicle records; the agency announced the breach weeks later and said affected drivers will be notified.
1 Sep 2026
Critical1 Sep 2026
Educational Testing Service (ETS)
Education · Records not stated
Attacker used a compromised login credential to breach ETS; names, birthdates and other data of millions of California public school students were stolen and CDE warned students.
1 Sep 2026
Critical1 Sep 2026
ShinyHunters extortion group
Government · Records not stated
ShinyHunters extortion group breached the FBI and stole data on bureau employees. Current and former agents describe the impact.
1 Sep 2026
Critical1 Sep 2026
Data breach at the Pentagon personnel agency
Government · 3,000,000 records
Data breach at the Pentagon personnel agency exposed personal information of 3 million people.
1 Sep 2026
High1 Sep 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
A malicious actor accessed driver license and motor vehicle records. The agency announced the breach weeks after it occurred.
1 Sep 2026
High1 Sep 2026
U.S. military (unnamed agency)
Government · Records not stated
Unauthorized users accessed files containing personal information of U.S. military personnel, per a breach notification letter.
1 Sep 2026
High1 Sep 2026
U.S. Military
Government · Records not stated
Unauthorized access exposed personal information of military personnel
1 Sep 2026
Critical1 Sep 2026
Times Car
Sector not stated · 6,600,000 records
Japanese car-sharing service confirmed cyberattack compromising approximately 6.6 million user accounts
1 Sep 2026
Critical1 Sep 2026
IDScan
Technology · Records not stated
ID verification service confirmed data breach with over 150 million driver's licenses stolen
1 Sep 2026
High1 Sep 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Confirmed cyber incident after Qilin ransomware group claimed attack on US federal agency
1 Sep 2026
High1 Sep 2026
Driver records
Government · Records not stated
Driver records breached in September; notification letters mailing with $1M identity theft insurance offered
1 Sep 2026
Critical1 Sep 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
ShinyHunters hacked jobs portal and stole sensitive agent information
1 Sep 2026
Critical1 Sep 2026
CenterPoint Energy
Sector not stated · 7,500,000 records
7.5 million customer records stolen by hacker
1 Sep 2026
Critical1 Sep 2026
IDScan
Technology · Records not stated
More than 150 million driver's licenses stolen
1 Sep 2026
Critical1 Sep 2026
Times Car
Technology · 6,600,000 records
6.6 million user accounts compromised in cyberattack
1 Sep 2026
High1 Sep 2026
Revolut
Finance · Records not stated
Hundreds of customer data stolen in impersonation scam with $3M ransom demand
1 Sep 2026
Critical1 Sep 2026
CenterPoint Energy
Sector not stated · 7,500,000 records
7.5 million customer records stolen in confirmed breach
1 Sep 2026
Critical1 Sep 2026
IDScan
Technology · Records not stated
Over 150 million driver's licenses stolen in confirmed data breach
1 Sep 2026
High1 Sep 2026
Trezor (email provider)
Technology · Records not stated
Data breach of email provider serving hardware crypto wallet company, scammers targeting users
1 Sep 2026
Critical1 Sep 2026
IDScan
Technology · Records not stated
Breach exposed more than 150 million driver's licenses stolen from ID verification service
1 Sep 2026
High1 Sep 2026
CenterPoint Energy
Sector not stated · Records not stated
Data breach confirmed after hacker leaked files from utility company systems
1 Sep 2026
Were you affected?