Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,346
Disclosures in the tracker, all years
2,059
Of those, indexed in 2026
117
Added in October
14
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 26 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
High1 Sep 2025
MedicSolution
Healthcare · Records not stated
KillSec ransomware group attacked healthcare software solutions provider in Brazil
1 Sep 2025
High1 Sep 2025
Insight Partners
Technology · Records not stated
VC firm breach exposed data of thousands of staff and limited partners
1 Sep 2025
Critical1 Sep 2025
FinWise
Finance · 689,000 records
Former employee accessed unencrypted data affecting 689,000 users at Utah bank and fintech partner
1 Sep 2025
High1 Sep 2025
NuPay
Finance · Records not stated
Thousands of Indian bank transfer records exposed online due to security lapse
1 Sep 2025
High1 Sep 2025
Insight Partners
Technology · Records not stated
VC firm data breach affecting thousands of staff and limited partners
1 Sep 2025
High1 Sep 2025
NuPay
Finance · Records not stated
Thousands of Indian bank transfer records found exposed online due to security lapse
1 Sep 2025
High1 Sep 2025
Stellantis
Sector not stated · Records not stated
Unauthorized access to systems affecting North American customer data provider
1 Sep 2025
Critical1 Sep 2025
FinWise Bank
Finance · 689,000 records
Insider data breach affecting 689,000 customers
1 Sep 2025
Critical1 Sep 2025
FinWise
Finance · 689,000 records
Breach affected 689,000 users; former employee accessed unencrypted data stored with fintech partner.
1 Sep 2025
Critical1 Sep 2025
FinWise Bank
Finance · 689,000 records
Former employee insider breach exposed 689,000 users' unencrypted personal data
1 Sep 2025
Critical1 Sep 2025
Federal Agency (unnamed)
Government · Records not stated
Breach via GeoServer vulnerability CVE-2024-36401 exploited within two weeks of disclosure
1 Sep 2025
High1 Sep 2025
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Heat-and-power plant breached via private APN; supplies heat to ~50,000 residents
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Potentially millions of customers' personal data stolen in cyberattack on parent company
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack by ShinyHunters exposing over 160 million Vietnamese financial records
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Cybercriminals stole private data of millions of customers across parent company's luxury brands
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Finance · 160,000,000 records
The disclosure as indexed does not name the organisation.
ShinyHunters exfiltrated over 160M records from Vietnam's financial system databases
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Hackers stole private data of millions of customers from parent company
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Cyberattack stole private data of millions of customers from luxury fashion brands
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Hackers stole private data of potentially millions of customers from luxury fashion labels
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Cyberattack stole private data of potentially millions of customers from luxury brands
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Private data of millions of customers stolen in cyberattack on luxury fashion parent company
1 Sep 2025
High1 Sep 2025
NuPay
Finance · Records not stated
Thousands of Indian bank transfer records exposed online after security lapse
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Cybercriminals stole details of potentially millions of customers from parent company Kering's systems
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Cyber-attack stole customer data of luxury brands, millions potentially impacted
1 Sep 2025
Were you affected?