Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,339
Disclosures in the tracker, all years
2,052
Of those, indexed in 2026
111
Added in October
18
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 25 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
74 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- Japan22 Oct 2026CapcomThe source does not say how they got in.BleepingComputer
- Japan19 Oct 2026Nikkei Inc.How they got in: stolen or reused passwords.BleepingComputer
- Japan16 Oct 2026Burger King JapanThe source does not say how they got in.Security Affairs
- Japan16 Oct 2026BK JapanThe source does not say how they got in.SecurityWeek
- Japan16 Oct 2026Al Jazeera Media NetworkHow they got in: a supplier or vendor that was compromised first.BleepingComputer
High1 Jun 2026
Valve
Technology · Records not stated
European logistics partner hit with data breach, customers warned of scam emails
1 Jun 2026
Critical1 Jun 2026
Thailand Digital Ministry
Government · Records not stated
221 million login records exposed, prompting MFA mandate for state systems
1 Jun 2026
High1 Jun 2026
Law firm (New Jersey)
Legal · 13,000 records
Data from 13,000 patients exposed via cyberattack on law firm representing hospitals
1 Jun 2026
Critical1 Jun 2026
Elasticsearch Database (Infostealer logs)
Technology · Records not stated
Publicly exposed database leaked 24 billion stolen credentials in June 2026, largest infostealer compilation
1 Jun 2026
Critical1 Jun 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26M patient records exposed in PEAR ransomware attack; medical billing data compromised
1 Jun 2026
Critical1 Jun 2026
MCBS Medical Billing
Healthcare · 1,260,000 records
1.26 million patients exposed in PEAR ransomware attack on medical billing company
1 Jun 2026
Critical1 Jun 2026
Instructure
Education · Records not stated
Canvas platform supply chain breach generating over 50% of all breach notices in 2026
1 Jun 2026
High1 Jun 2026
Law Firm (New Jersey)
Legal · 13,000 records
Cyberattack on law firm exposed hospital records of nearly 13,000 patients
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records confirmed stolen in major ransomware attack disrupting healthcare services
1 Jun 2026
Critical1 Jun 2026
Elasticsearch (public database)
Sector not stated · Records not stated
24 billion stolen credentials leaked in publicly exposed database, largest infostealer log compilation
1 Jun 2026
High1 Jun 2026
SISVISA
Healthcare · Records not stated
102,215 Brazilian health surveillance records leaked including IDs and tax data
1 Jun 2026
High1 Jun 2026
Personal and medical information including SSNs
Healthcare · Records not stated
Personal and medical information including SSNs exposed in data breach
1 Jun 2026
High1 Jun 2026
T-Mobile
Technology · Records not stated
Data breach exposed customer information; company violated WA notification law with text message notices
1 Jun 2026
Critical1 Jun 2026
Exact Sciences / Abbott
Healthcare · Records not stated
Patient data exposed through at-home diagnostic tests; sensitive and confidential personal information compromised
1 Jun 2026
High1 Jun 2026
Law firm representing hospitals
Legal · 13,000 records
Cyberattack exposed hospital records of nearly 13,000 patients in New Jersey
1 Jun 2026
High1 Jun 2026
Tribeca Festival
Sector not stated · Records not stated
Hundreds of thousands of records and celebrity contact information exposed in data leak
1 Jun 2026
High1 Jun 2026
Allstate
Finance · Records not stated
Employee-related records exposed in data breach
1 Jun 2026
Critical1 Jun 2026
Synnovis/NHS Essex
Healthcare · 900,000 records
Thousands of NHS patient records stolen in ransomware attack affecting Essex NHS trust
1 Jun 2026
High1 Jun 2026
Suno
Technology · Records not stated
Customer records and AI model training data exposed; customers not notified
1 Jun 2026
High1 Jun 2026
Canvas (Learning Management Platform)
Education · Records not stated
Learning platform attacked by ShinyHunters hacker group, security breach disclosed
1 Jun 2026
High1 Jun 2026
Coca-Cola Fairlife
Retail · Records not stated
Ransomware attack shut down $4 billion dairy brand operations
1 Jun 2026
High1 Jun 2026
FirstClass (travel agency)
Sector not stated · Records not stated
Customer records breached by threat actor operating on underground hacking forums
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Ransomware attack stole thousands of NHS patient records from Mid South Essex Foundation Trust
1 Jun 2026
High1 Jun 2026
FirstClass (Australian Travel Agency)
Sector not stated · Records not stated
Customer records allegedly breached by threat actor operating on underground hacking forums
1 Jun 2026
Were you affected?