Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,346
Disclosures in the tracker, all years
2,059
Of those, indexed in 2026
120
Added in October
12
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 27 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
74 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- Japan22 Oct 2026CapcomThe source does not say how they got in.BleepingComputer
- Japan19 Oct 2026Nikkei Inc.How they got in: stolen or reused passwords.BleepingComputer
- Japan16 Oct 2026Burger King JapanThe source does not say how they got in.Security Affairs
- Japan16 Oct 2026BK JapanThe source does not say how they got in.SecurityWeek
- Japan16 Oct 2026Al Jazeera Media NetworkHow they got in: a supplier or vendor that was compromised first.BleepingComputer
High1 Mar 2026
Loblaw
Retail · Records not stated
Data breach affecting Canadian customers of Loblaw-owned stores
1 Mar 2026
High1 Mar 2026
CareCloud
Healthcare · Records not stated
Electronic health records of patients leaked after hackers accessed healthcare software systems
1 Mar 2026
Critical1 Mar 2026
LexisNexis
Legal · 400,000 records
400K users exposed including federal judges and .gov accounts via cloud system breach
1 Mar 2026
High1 Mar 2026
Lehigh Carbon Community College
Education · Records not stated
Data breach prompted school closure; extent of breach not fully disclosed
1 Mar 2026
High1 Mar 2026
CommonSpirit Health
Healthcare · 19,027 records
Healthcare consulting company data breach exposed 19,027 patient records and medical information
1 Mar 2026
High1 Mar 2026
DGFiP (French tax authority)
Government · 678,000 records
678,000 people and businesses affected, compromised credentials exposed tax and business info
1 Mar 2026
Critical1 Mar 2026
RingCentral
Technology · 1,600,000 records
1.6 million customer records exposed in data leak
1 Mar 2026
Critical1 Mar 2026
IDMerit
Technology · Records not stated
1 billion identity records exposed due to unprotected database
1 Mar 2026
Critical1 Mar 2026
TriZetto
Healthcare · 3,400,000 records
Year-long hack exposed records on 3.4 million people
1 Mar 2026
Critical1 Mar 2026
UK BioBank
Healthcare · Records not stated
Confidential health records from flagship medical research project exposed online multiple times
1 Mar 2026
Critical1 Mar 2026
UK BioBank
Healthcare · Records not stated
Confidential health records from medical research project exposed online
1 Mar 2026
Critical1 Mar 2026
UnitedHealthcare
Healthcare · Records not stated
One of the largest healthcare data breaches in American history involving multiple companies
1 Mar 2026
Critical1 Mar 2026
LiteLLM
Technology · Records not stated
Supply chain attack exposed over 430,000 CI/CD pipelines affecting over 2,500 organizations
1 Mar 2026
Critical1 Mar 2026
Conduent
Sector not stated · Records not stated
Breach compromised personal data of millions nationwide, notifications sent a year later
1 Mar 2026
Critical1 Mar 2026
Organisation not named
Healthcare · 1,200,000 records
The disclosure as indexed does not name the organisation.
Ransomware attack exposing personal data of 1.2 million individuals
1 Mar 2026
Critical1 Mar 2026
GuardDog
Healthcare · Records not stated
Telehealth company accessed and shared patient medical records from Epic platform with law firms without authorization
1 Mar 2026
Critical1 Mar 2026
CISA (US Agency)
Government · Records not stated
Breached through Cisco vulnerability, FIRESTARTER backdoor allowed persistent access through March
1 Mar 2026
Critical1 Mar 2026
Marquis
Finance · 672,000 records
Ransomware attack stole personal and financial data of over 672,000 people from fintech company
1 Mar 2026
High1 Mar 2026
Organisation not named
Education · Records not stated
The disclosure as indexed does not name the organisation.
Driver's license numbers and voter information from Multiethnic Cohort Study exposed in ransomware attack
1 Mar 2026
Critical1 Mar 2026
Fortinet FortiGate
Technology · Records not stated
73,932 FortiGate systems exposed with valid administrative and VPN credentials
1 Mar 2026
High1 Mar 2026
Multiethnic Cohort Study data
Education · Records not stated
Multiethnic Cohort Study data leaked following ransomware attack including driver's license numbers
1 Mar 2026
Critical1 Mar 2026
CISA (US Government)
Government · Records not stated
US agency breached through Cisco vulnerability, FIRESTARTER backdoor malware allowed persistent access through March
1 Mar 2026
High1 Mar 2026
Ransomware attack data
Education · Records not stated
Ransomware attack data leak from Multiethnic Cohort Study exposed driver's license numbers and voter registration data
1 Mar 2026
Critical1 Mar 2026
TriZetto (Year-long hack)
Healthcare · 3,400,000 records
Year-long network hack exposed records on 3.4 million people
1 Mar 2026
Were you affected?