Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,336
Disclosures in the tracker, all years
2,049
Of those, indexed in 2026
104
Added in October
24
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 24 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
74 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- Japan22 Oct 2026CapcomThe source does not say how they got in.BleepingComputer
- Japan19 Oct 2026Nikkei Inc.How they got in: stolen or reused passwords.BleepingComputer
- Japan16 Oct 2026Burger King JapanThe source does not say how they got in.Security Affairs
- Japan16 Oct 2026BK JapanThe source does not say how they got in.SecurityWeek
- Japan16 Oct 2026Al Jazeera Media NetworkHow they got in: a supplier or vendor that was compromised first.BleepingComputer
High1 Jul 2026
Clover Health
Healthcare · Records not stated
Health insurer disclosed data breach; data type and victim count not yet determined
1 Jul 2026
High1 Jul 2026
Craneware
Healthcare · Records not stated
Hospital software vendor breach exposed healthcare customer data through supply-chain attack
1 Jul 2026
High1 Jul 2026
River Financial Corporation
Finance · Records not stated
Ransomware attack; hackers deleted stolen data after ransom demand; confirmed data deletion
1 Jul 2026
Critical1 Jul 2026
Instructure (Canvas platform)
Education · Records not stated
Supply chain breach generating majority of 2026 breach notices
1 Jul 2026
High1 Jul 2026
Ransomware attack disrupted systems operations
Sector not stated · Records not stated
Ransomware attack disrupted systems operations
1 Jul 2026
Critical1 Jul 2026
Comcast Xfinity
Technology · 35,000,000 records
Cyberattack exposes personal information of Xfinity customers; $117.5M settlement reached
1 Jul 2026
High1 Jul 2026
LVM (Latvian State Forestry)
Sector not stated · Records not stated
Ransomware attack, systems still being restored weeks after incident
1 Jul 2026
High1 Jul 2026
DHS (Homeland Security)
Government · Records not stated
Network intrusion on Homeland Security Information Network supporting World Cup operations confirmed
1 Jul 2026
High1 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Network intrusion on Homeland Security Information Network supporting World Cup infrastructure
1 Jul 2026
High1 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack attributed to foreign financially motivated threat group
1 Jul 2026
High1 Jul 2026
LVM (Latvian Forestry)
Sector not stated · Records not stated
Ransomware attack by foreign financially motivated group disrupted forestry operations
1 Jul 2026
High1 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack attributed to foreign financially motivated group; systems restoration ongoing
1 Jul 2026
High1 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Network intrusion on Homeland Security Information Network confirmed after being ruled false positive twice
1 Jul 2026
High1 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Network intrusion on Homeland Security Information Network confirmed after twice ruled false positive
1 Jul 2026
High1 Jul 2026
LVM (Latvian Forestry Company)
Sector not stated · Records not stated
Ransomware attack attributed to foreign financially motivated group
1 Jul 2026
High1 Jul 2026
LVM (Latvian forestry company)
Sector not stated · Records not stated
Ransomware attack by foreign financially motivated group; systems still being restored
1 Jul 2026
High1 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Network intrusion on Homeland Security Information Network confirmed after two false positive rulings
1 Jul 2026
Critical1 Jul 2026
FortiBleed/Fortinet
Technology · Records not stated
73,932 FortiGate firewall administrative and VPN credentials exposed via credential exposure campaign
1 Jul 2026
High1 Jul 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Patient records stolen in cyberattack affecting 21 clinics, personal info and medical notes exposed
1 Jul 2026
Critical1 Jul 2026
Network intrusion
Government · Records not stated
Network intrusion confirmed on Homeland Security Information Network
1 Jul 2026
High1 Jul 2026
LastPass
Technology · Records not stated
Data breach at third-party vendor exposed customer data; latest breach confirmed
1 Jul 2026
High1 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Network intrusion on Homeland Security Information Network; initially ruled false positive twice
1 Jul 2026
Critical1 Jul 2026
Partnered Clinics (Australia)
Healthcare · Records not stated
Cyber-attack exposed Medicare numbers, treatment details, pathology results of patients
1 Jul 2026
High1 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Network intrusion on Homeland Security Information Network supporting World Cup games
1 Jul 2026
Were you affected?