Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,319
Disclosures in the tracker, all years
2,034
Of those, indexed in 2026
87
Added in October
21
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 22 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
72 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- Japan19 Oct 2026Nikkei Inc.How they got in: stolen or reused passwords.BleepingComputer
- Japan16 Oct 2026Burger King JapanThe source does not say how they got in.Security Affairs
- Japan16 Oct 2026BK JapanThe source does not say how they got in.SecurityWeek
- Japan16 Oct 2026Al Jazeera Media NetworkHow they got in: a supplier or vendor that was compromised first.BleepingComputer
- Japan14 Oct 2026Healthcare and financial organisations globallyHow they got in: email made to look like it came from a trusted sender.The Hacker News
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records leaked on dark web; police and government contact details exposed
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised in on-premises Microsoft servers, suspected SharePoint vulnerabilities
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records stolen and leaked on dark web by ExfilSquad
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records stolen; police and government data leaked on dark web
1 Aug 2026
High1 Aug 2026
Orova ransomware
Sector not stated · Records not stated
Orova ransomware targeted five Hong Kong organizations in debut campaign across 24 victims in six countries
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records stolen; police, government and customer data leaked on dark web
1 Aug 2026
High1 Aug 2026
Nichirei
Sector not stated · Records not stated
Ransomware attack disrupted operations at Japan-based frozen-food supplier and logistics firm
1 Aug 2026
High1 Aug 2026
AnMed Health
Healthcare · Records not stated
Cyberattack on nonprofit health system forcing facility closures and limited capacity operations
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patient records exposed in PEAR ransomware attack
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Police, government and customer contact details exposed and leaked on dark web
1 Aug 2026
Critical1 Aug 2026
Conduent
Healthcare · Records not stated
62.2 million healthcare records exposed, third-largest US healthcare breach ever
1 Aug 2026
High1 Aug 2026
Five Hong Kong firms
Sector not stated · Records not stated
Orova ransomware breached five Hong Kong organizations in debut campaign of 24 victims
1 Aug 2026
High1 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Wave of cyberattacks by UNC6671 extortion group targeting hedge funds and private-equity firms
1 Aug 2026
Critical1 Aug 2026
Snowflake (multiple customer accounts)
Technology · 165,000,000 records
Company accounts accessed and customer data stolen in cloud data-theft attacks
1 Aug 2026
High1 Aug 2026
Levi Strauss
Retail · Records not stated
Corporate data stolen via social engineering; hackers accessed three employee computers
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · 135,000 records
The disclosure as indexed does not name the organisation.
Police and government contact details published on dark web; 135K records claimed
1 Aug 2026
High1 Aug 2026
Multiple Hong Kong firms
Sector not stated · Records not stated
Orova ransomware breached five Hong Kong organizations; part of 24-victim campaign across six countries
1 Aug 2026
Medium1 Aug 2026
Stade Français
Sector not stated · Records not stated
French rugby club experienced cyberattack with data leak; systems restored from backups
1 Aug 2026
High1 Aug 2026
NHS Tayside
Healthcare · 900,000 records
Unauthorized access to medical records of deceased 9-year-old girl after staff improper access
1 Aug 2026
High1 Aug 2026
CEVA Logistics
Sector not stated · Records not stated
Data breach affecting Ajax football club, ING bank, and Ace & Tate eyewear chain
1 Aug 2026
High1 Aug 2026
200 accounts compromised through on-premises Microsoft SharePoint vulnerabilities
Government · Records not stated
200 accounts compromised through on-premises Microsoft SharePoint vulnerabilities
1 Aug 2026
High1 Aug 2026
Data theft
Government · Records not stated
Data theft confirmed; 135K contact records leaked on dark web by ExfilSquad
1 Aug 2026
Critical1 Aug 2026
Multiple water utilities
Government · Records not stated
Operational technology systems targeted in cyberattacks across at least 12 U.S. states
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised; anomalies detected in on-premises Microsoft servers, possibly via SharePoint vulnerabilities
1 Aug 2026
Were you affected?