Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,339
Disclosures in the tracker, all years
2,052
Of those, indexed in 2026
111
Added in October
18
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 25 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
74 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- Japan22 Oct 2026CapcomThe source does not say how they got in.BleepingComputer
- Japan19 Oct 2026Nikkei Inc.How they got in: stolen or reused passwords.BleepingComputer
- Japan16 Oct 2026Burger King JapanThe source does not say how they got in.Security Affairs
- Japan16 Oct 2026BK JapanThe source does not say how they got in.SecurityWeek
- Japan16 Oct 2026Al Jazeera Media NetworkHow they got in: a supplier or vendor that was compromised first.BleepingComputer
Critical1 Jun 2026
Fortinet
Technology · Records not stated
FortiBleed: credentials and configuration data exposed for 73,000 devices; 70,000+ suspected affected
1 Jun 2026
Critical1 Jun 2026
Charter Communications
Technology · 42,000,000 records
42 million records exposed by ShinyHunters extortion group
1 Jun 2026
Critical1 Jun 2026
Personal and medical records including SSNs
Healthcare · Records not stated
Personal and medical records including SSNs exposed
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Ransomware attack stole thousands of NHS patient records held by Essex healthcare trust
1 Jun 2026
Critical1 Jun 2026
Publicly
Technology · Records not stated
Publicly exposed Elasticsearch database exposed 24 billion stolen credential records
1 Jun 2026
High1 Jun 2026
Thousands of patient records stolen in ransomware attack
Healthcare · Records not stated
Thousands of patient records stolen in ransomware attack
1 Jun 2026
Critical1 Jun 2026
Fortinet/FortiBleed
Technology · Records not stated
Credential leak exposed administrator credentials for 73,000+ Fortinet VPN and firewall devices
1 Jun 2026
Critical1 Jun 2026
SSNs and medical records
Healthcare · Records not stated
SSNs and medical records exposed
1 Jun 2026
Critical1 Jun 2026
FortiBleed/Fortinet
Technology · Records not stated
Verified administrator credentials and VPN data exposed for 73,932 FortiGate firewalls
1 Jun 2026
Critical1 Jun 2026
Fortinet FortiBleed
Technology · Records not stated
FortiBleed campaign exposed verified administrator credentials for 73,932 FortiGate firewalls and VPN devices
1 Jun 2026
High1 Jun 2026
Coca-Cola/Fairlife
Retail · Records not stated
Ransomware attack on dairy operations by Anubis cybercrime group with data theft
1 Jun 2026
Critical1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of patient records stolen in ransomware attack affecting NHS healthcare systems
1 Jun 2026
Critical1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records confirmed stolen in ransomware attack
1 Jun 2026
Critical1 Jun 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Thousands of patient records stolen during major ransomware attack
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack stole thousands of patient records in major healthcare cyberattack
1 Jun 2026
Critical1 Jun 2026
Elasticsearch database (infostealer logs)
Technology · Records not stated
Publicly exposed database leaked 24 billion stolen credentials, one of largest credential compilations
1 Jun 2026
Critical1 Jun 2026
Unnamed Elasticsearch database
Technology · Records not stated
Publicly exposed database leaked 24 billion stolen credentials, one of largest infostealer log compilations
1 Jun 2026
Critical1 Jun 2026
Elasticsearch Database (Public Exposure)
Technology · Records not stated
Publicly exposed Elasticsearch database leaked 24 billion stolen credentials, largest infostealer compilation
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen in major ransomware attack affecting Essex healthcare
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Ransomware attack stolen thousands of NHS patient records from Essex NHS trust
1 Jun 2026
Critical1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of patient records stolen in ransomware cyberattack on NHS trust
1 Jun 2026
High1 Jun 2026
Tchap (France Government)
Government · Records not stated
Messaging app breach hit 73,467 French government accounts in June 2026
1 Jun 2026
Critical1 Jun 2026
Elasticsearch Database (Unnamed Source)
Technology · Records not stated
Publicly exposed database leaked 24 billion stolen credentials in one of the largest infostealer compilations
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen during major ransomware attack affecting Essex healthcare trust
1 Jun 2026
Were you affected?