Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,342
Disclosures in the tracker, all years
2,054
Of those, indexed in 2026
118
Added in October
15
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 26 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Critical1 Jun 2025
Qantas
Retail · Records not stated
Cyber attack on third-party customer service platform impacted 6 million airline customers
1 Jun 2025
High1 Jun 2025
Ahold Delhaize
Retail · 2,200,000 records
Cyber-attack on US operations exposed personal data of 2.2 million customers
1 Jun 2025
Critical1 Jun 2025
Paraguay Government
Government · Records not stated
7.4 million citizen records containing PII offered for sale by cybercriminals
1 Jun 2025
Critical1 Jun 2025
Aflac
Finance · 1,300,000 records
22.65 million individuals affected by major data breach
1 Jun 2025
Critical1 Jun 2025
Organisation not named
Government · 7,400,000 records
The disclosure as indexed does not name the organisation.
Data breach involving 7.4 million records containing personally identifiable information of Paraguayan citizens
1 Jun 2025
Critical1 Jun 2025
Google, Facebook, Apple
Technology · Records not stated
16 billion login credentials leaked including passwords from Google, Facebook, Apple
1 Jun 2025
High1 Jun 2025
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Patient personal health information compromised in data breach affecting hospital system
1 Jun 2025
Critical1 Jun 2025
Google, Facebook, Apple (Multiple)
Technology · Records not stated
16 billion login credentials leaked including passwords for Google, Facebook, Apple and other sites
1 Jun 2025
Critical1 Jun 2025
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
16 billion login credentials leaked including passwords from Google, Facebook, and Apple
1 Jun 2025
Critical1 Jun 2025
16 billion login credentials leaked across major platforms
Technology · Records not stated
16 billion login credentials leaked across major platforms
1 Jun 2025
High1 Jun 2025
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Energy facility breached via private APN, supplies heat to ~50,000 residents
1 Jun 2025
Critical1 Jun 2025
Qantas
Sector not stated · 6,000,000 records
Cyber attack on third-party customer service platform compromised 6 million customer records
1 Jun 2025
Critical1 Jun 2025
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Iran-linked cyberattacks on operational technology across water systems in 12 US states
1 Jun 2025
Critical1 Jun 2025
Water utilities (12 states)
Government · Records not stated
Cyberattacks on operational technology across at least 12 states; South Dakota and Georgia announced incidents
1 Jun 2025
High1 Jun 2025
LexisNexis
Legal · Records not stated
Suspicious activity detected on servers; Diligence, Metabase API, and Newsdesk services shut down
1 Jun 2025
High1 Jun 2025
North Carolina Ports
Sector not stated · Records not stated
Cybersecurity incident forced shift to manual operations; systems under restoration
1 Jun 2025
High1 Jun 2025
Framework
Technology · Records not stated
Data breach affecting all customers: names, emails, phone numbers, physical addresses exposed
1 Jun 2025
High1 Jun 2025
IEH Corporation
Government · Records not stated
Military device manufacturer cyber incident disclosed to SEC affecting specialized military products
1 Jun 2025
Critical1 Jun 2025
Medical Billing Company (unidentified)
Healthcare · 1,300,000 records
1.3 million individuals' protected health data leaked to dark web in ransomware attack
1 Jun 2025
High1 Jun 2025
Water utilities
Government · Records not stated
Cyberattacks on operational technology systems expanded to 12 states including South Dakota and Georgia
1 Jun 2025
High1 Jun 2025
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Wave of cyberattacks by UNC6671 extortion group targeting financial organizations
1 Jun 2025
Critical1 Jun 2025
PEAR ransomware attack
Healthcare · 1,260,000 records
PEAR ransomware attack exposed 1.26 million patients' data. Medical billing company in Augusta, Georgia
1 Jun 2025
High1 Jun 2025
North Carolina Ports Authority
Sector not stated · Records not stated
Cyberattack disrupted IT systems and operations at Port of Wilmington
1 Jun 2025
High1 Jun 2025
TrueConf
Technology · Records not stated
Hackers breached servers and trojanized client installers with backdoors via unpatched vulnerabilities
1 Jun 2025
Were you affected?