Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,339
Disclosures in the tracker, all years
2,052
Of those, indexed in 2026
111
Added in October
18
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 25 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
74 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- Japan22 Oct 2026CapcomThe source does not say how they got in.BleepingComputer
- Japan19 Oct 2026Nikkei Inc.How they got in: stolen or reused passwords.BleepingComputer
- Japan16 Oct 2026Burger King JapanThe source does not say how they got in.Security Affairs
- Japan16 Oct 2026BK JapanThe source does not say how they got in.SecurityWeek
- Japan16 Oct 2026Al Jazeera Media NetworkHow they got in: a supplier or vendor that was compromised first.BleepingComputer
Medium1 Jun 2026
Nichirei
Retail · Records not stated
Ransomware attack disrupted operations at Japanese frozen-food supplier and logistics firm
1 Jun 2026
Critical1 Jun 2026
Elasticsearch Database (Public)
Technology · Records not stated
24 billion stolen credentials leaked via publicly exposed Elasticsearch database in June 2026
1 Jun 2026
Critical1 Jun 2026
Elasticsearch database
Technology · Records not stated
Publicly exposed database leaked 24 billion stolen credentials in largest infostealer compilation
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Ransomware attack stole thousands of NHS patient records from Essex NHS trust
1 Jun 2026
Critical1 Jun 2026
Tchap
Government · Records not stated
France government messaging app breached in June 2026, exposing 73,467 government accounts
1 Jun 2026
Critical1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen in ransomware attack affecting multiple clinics
1 Jun 2026
Critical1 Jun 2026
Elasticsearch database (public)
Technology · Records not stated
24 billion stolen credentials leaked in publicly exposed database; one of largest infostealer log compilations
1 Jun 2026
High1 Jun 2026
Essex NHS Trust/Synnovis
Healthcare · 900,000 records
Thousands of NHS patient records stolen in ransomware cyberattack on Mid South Essex Foundation Trust
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of patient records stolen during major ransomware attack affecting NHS trust
1 Jun 2026
Critical1 Jun 2026
Ransomware attack
Healthcare · 1,300,000 records
Ransomware attack exposed protected health data of 1.3 million people to dark web
1 Jun 2026
Critical1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen during major ransomware attack
1 Jun 2026
High1 Jun 2026
Synnovis (NHS Essex)
Healthcare · 900,000 records
Thousands of NHS patient records stolen in ransomware cyberattack
1 Jun 2026
Critical1 Jun 2026
Puerto Rico Government Agency
Government · Records not stated
Cybersecurity loophole exposed 1 million social security numbers in mapping service
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen during ransomware attack
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of patient records stolen in ransomware attack affecting NHS trust
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen in ransomware cyberattack on Essex healthcare provider
1 Jun 2026
High1 Jun 2026
Synnovis/NHS Mid South Essex
Healthcare · 900,000 records
Thousands of NHS patient records stolen in ransomware cyberattack on healthcare trust
1 Jun 2026
High1 Jun 2026
Partnered (Australian clinics)
Healthcare · Records not stated
Cyber-attack exposing sensitive medical records including Medicare numbers, treatment details, pathology results
1 Jun 2026
High1 Jun 2026
Cyberattack on law firm
Legal · 13,000 records
Cyberattack on law firm exposed hospital records for nearly 13,000 patients in New Jersey
1 Jun 2026
High1 Jun 2026
Ransomware cyberattack
Healthcare · Records not stated
Ransomware cyberattack exposed thousands of patient records
1 Jun 2026
Critical1 Jun 2026
Unknown (Elasticsearch)
Technology · Records not stated
Publicly exposed Elasticsearch database with 24 billion stolen credential records accessible to anyone
1 Jun 2026
Critical1 Jun 2026
Medical Billing Company (unnamed)
Healthcare · 1,300,000 records
Ransomware attack in 2025 exposed protected health data on 1.3 million people, leaked to dark web
1 Jun 2026
Medium1 Jun 2026
Evanston Township High School
Education · Records not stated
Ransomware attack disrupted phone systems and network services
1 Jun 2026
Critical1 Jun 2026
Synnovis/NHS (Essex)
Healthcare · 900,000 records
Thousands of NHS patient records stolen in ransomware attack affecting Mid South Essex Foundation Trust
1 Jun 2026
Were you affected?