Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,339
Disclosures in the tracker, all years
2,052
Of those, indexed in 2026
111
Added in October
18
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 25 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
74 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- Japan22 Oct 2026CapcomThe source does not say how they got in.BleepingComputer
- Japan19 Oct 2026Nikkei Inc.How they got in: stolen or reused passwords.BleepingComputer
- Japan16 Oct 2026Burger King JapanThe source does not say how they got in.Security Affairs
- Japan16 Oct 2026BK JapanThe source does not say how they got in.SecurityWeek
- Japan16 Oct 2026Al Jazeera Media NetworkHow they got in: a supplier or vendor that was compromised first.BleepingComputer
Critical1 Jun 2026
Baylor Genetics
Healthcare · 2,800,000 records
2.8 million patients affected; exposed medical conditions, SSNs, and employee information
1 Jun 2026
Critical1 Jun 2026
Charter Communications
Technology · 42,000,000 records
Data breach confirmed; ShinyHunters extortion group threatened release of customer data; 42 million records
1 Jun 2026
Critical1 Jun 2026
McKesson
Healthcare · 284,000,000 records
Data breach confirmed; ShinyHunters claimed theft of 284 million records including PII and PHI
1 Jun 2026
Critical1 Jun 2026
Odido
Sector not stated · 6,500,000 records
ShinyHunters stole 6.5M customer records; €1M ransom demanded
1 Jun 2026
Critical1 Jun 2026
Aflac Japan
Finance · 1,300,000 records
Exposed 4.38 million customers; second major breach in over a year
1 Jun 2026
High1 Jun 2026
FirstClass
Sector not stated · Records not stated
Customer records breached; Sydney-based travel agency data allegedly stolen and posted on underground hacking forums
1 Jun 2026
Critical1 Jun 2026
Canada Life
Finance · 5,500,000 records
5.5 million records allegedly exposed including customer, employee, and corporate data
1 Jun 2026
High1 Jun 2026
Lands' End
Retail · Records not stated
Data breach impacting customer records; settlement reached with eligible customers receiving $5K
1 Jun 2026
High1 Jun 2026
University of Western Australia
Education · Records not stated
Second data breach in six months; accidental leak of student records
1 Jun 2026
High1 Jun 2026
US Bank
Finance · Records not stated
Investigating data breach following LockBit ransomware claim threatening to publish stolen data
1 Jun 2026
High1 Jun 2026
Huntsville Hospital
Healthcare · Records not stated
Patient health information compromised via third-party vendor breach
1 Jun 2026
High1 Jun 2026
Essex NHS Trust
Healthcare · 900,000 records
Patient records stolen in cyber attack; disclosure delayed over six months
1 Jun 2026
High1 Jun 2026
Fortinet
Technology · Records not stated
74,000 firewall and VPN gateway credentials stolen from configuration files
1 Jun 2026
High1 Jun 2026
Fairlife (Coca-Cola subsidiary)
Retail · Records not stated
Ransomware attack resulted in theft of company data from dairy subsidiary
1 Jun 2026
High1 Jun 2026
Partnered Health
Healthcare · Records not stated
Australian GP network breach exposed patient records on dark web
1 Jun 2026
High1 Jun 2026
Huntsville Hospital Health System
Healthcare · Records not stated
Third-party breach exposed patient information at hospital facilities
1 Jun 2026
High1 Jun 2026
LastPass
Technology · Records not stated
Third-party vendor breach exposed customer data
1 Jun 2026
Critical1 Jun 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Personal information of 3 million Texans exposed by cyber attack
1 Jun 2026
Critical1 Jun 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Personal information of 3 million Texans exposed in cyber attack
1 Jun 2026
Critical1 Jun 2026
Fortinet FortiGate
Technology · Records not stated
Dataset containing valid administrative and VPN credentials for 73,932 FortiGate firewalls exposed
1 Jun 2026
Critical1 Jun 2026
Fortinet
Technology · Records not stated
FortiBleed: Verified administrator credentials for 73,000+ VPN devices exposed globally
1 Jun 2026
Critical1 Jun 2026
Charter Communications
Technology · 42,000,000 records
Data breach exposing 42 million customer records to extortion group ShinyHunters
1 Jun 2026
Medium1 Jun 2026
DC Housing Authority
Government · Records not stated
Cybersecurity incident with limited sensitive information compromised
1 Jun 2026
Critical1 Jun 2026
Fortinet
Technology · Records not stated
FortiBleed campaign exposed verified admin credentials for 73,932 FortiGate systems
1 Jun 2026
Were you affected?