Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,301
Disclosures in the tracker, all years
2,016
Of those, indexed in 2026
67
Added in October
19
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 19 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
65 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- South Korea10 Oct 2026South Korean banksHow they got in: automated AI tools that work through many organizations at once.BleepingComputer
- South Korea8 Oct 2026Uranium FinanceHow they got in: a known flaw in software the victim ran.BleepingComputer
- South Korea7 Oct 2026Exposed AI server operatorsHow they got in: a system left reachable from the internet.BleepingComputer
- South Korea7 Oct 2026SpotifyThe source does not say how they got in.BleepingComputer
- South Korea7 Oct 2026GoogleHow they got in: a supplier or vendor that was compromised first.BleepingComputer
- South Korea7 Oct 2026Fortinet FortiGate firewall ownersHow they got in: stolen or reused passwords.BleepingComputer
- South Korea7 Oct 2026MonsterCloud customersThe source does not say how they got in.BleepingComputer
Medium28 Aug 2026
Love Electric Breach
Sector not stated · Records not stated
Love Electric’s alleged data breach exposes sensitive driver data and highlights the identity risks created by third-party salary sacrifice providers. A seller on an English-language data-breach forum claimed on…
28 Aug 2026
Medium28 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The frustrating reality after an OT cyberattack: no data, no trail, and no history.
28 Aug 2026
Medium28 Aug 2026
Matt Trewern
Healthcare · Records not stated
Matt Trewern reports on another charity hit by the Beacon CRM data breach that affected more than 1,000 charities and non-profits: People using an HIV charity have been told their “sensitive and personal”…
28 Aug 2026
Critical28 Aug 2026
Winona County
Finance · Records not stated
WXOW in Minnesota reports: Winona County paid more than $128,000 following a January ransomware attack, according to a county news release. The county said it negotiated and paid $128,539.57 with assistance from its…
28 Aug 2026
High28 Aug 2026
Toy-making giant Hasbro
Finance · Records not stated
Hasbro, one of the world's largest toy and game companies, has disclosed that attackers have accessed the personal and financial information of an undisclosed number of employees.
28 Aug 2026
Critical28 Aug 2026
Organisation not named
Sector not stated · 8,700,000 records
The disclosure as indexed does not name the organisation.
A cyberattack on Manchester Airports Group exposed data of 8.7 million customers across Manchester, Stansted, and East Midlands airports. Manchester Airports Group disclosed that an unauthorised third party accessed…
28 Aug 2026
Medium27 Aug 2026
Manchester Airports Group
Sector not stated · Records not stated
The Manchester Airports Group (MAG) disclosed that hackers breached its systems and stole customer data, including Wi-Fi sign-ups from Manchester, Stansted, and East Midlands airports.
27 Aug 2026
Medium27 Aug 2026
Manchester Airports Group
Sector not stated · Records not stated
Gabriel Higgins reports: Manchester Airports Group (MAG) has confirmed that it has been the target of a cybersecurity incident carried out by an unauthorised third party, resulting in the exposure of a quantity of…
27 Aug 2026
Critical27 Aug 2026
A spokesperson
Sector not stated · 8,700,000 records
A spokesperson told The Yorkshire Post that roughly 8.7 million people were impacted, although they did not provide a date range. They added that in the “vast majority” of cases, the only information accessed was an…
27 Aug 2026
Medium27 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Customer data linked to bookings and airport Wi-Fi registrations at Manchester, Stansted and East Midlands airports has been accessed by an unauthorized third party
27 Aug 2026
Medium27 Aug 2026
Brian Krebs
Government · Records not stated
Brian Krebs reports: Authorities in Australia have arrested two men believed to be members of TeamPCP, a prolific cybercrime and data extortion group blamed for perpetrating the longest running spree of software supply…
27 Aug 2026
Critical27 Aug 2026
DOJ firearms agency
Government · Records not stated
The Bureau of Alcohol, Tobacco, Firearms and Explosives confirmed it experienced a cyberattack on a system containing investigation information, as a prolific ransomware gang claimed to have carried out the breach.
27 Aug 2026
High27 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Authorities in Australia have arrested two men believed to be members of TeamPCP, a prolific cybercrime and data extortion group blamed for perpetrating the longest running spree of software supply chain attacks ever.…
27 Aug 2026
Critical27 Aug 2026
Carhartt data breach
Sector not stated · 12,900,000 records
The ShinyHunters extortion group has published sensitive data from nearly 13 million accounts stolen from clothing retailer giant Carhartt earlier this month, according to data breach notification service Have I Been…
27 Aug 2026
Medium27 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The cybersecurity incident has disrupted Boston Scientific’s ability to process and ship customer orders.
The post Cyberattack Causes Global Disruption at Boston Scientific appeared first on SecurityWeek.
27 Aug 2026
Medium27 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The pro-Russian hacker group Server Killers claimed responsibility for the attack.
The post Pro-Russian Hackers Claim Responsibility for Major Cyberattack on Norway’s Public Digital Services appeared first on…
27 Aug 2026
Medium26 Aug 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
The company released a statement and filed documents with the Securities and Exchange Commission (SEC) saying a cybersecurity incident was discovered on Tuesday.
26 Aug 2026
Medium26 Aug 2026
Boston Scientific
Healthcare · Records not stated
Medical technology company Boston Scientific has been targeted in a cyberattack that disrupted some of its IT systems, causing operational disruptions globally.
26 Aug 2026
Medium26 Aug 2026
Organisation not named
Sector not stated · 2,000 records
The disclosure as indexed does not name the organisation.
Here’s one we missed last week. Hannah Spray reports: The personal information of more than 2,000 people was stolen from Autism Services of Saskatoon during a data breach last year. In the aftermath, the…
26 Aug 2026
Medium26 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
The agency has released guidance on reducing internet exposure in the wake of the recent Iran-linked hacker attacks.
The post CISA: Over 100 Internet-Exposed Water Systems Targeted in July Cyberattacks appeared first…
26 Aug 2026
Medium26 Aug 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Nutex Health has informed the SEC that it recently detected unauthorized access and data exfiltration.
The post Sensitive Information Exposed in Nutex Health Data Breach appeared first on SecurityWeek.
26 Aug 2026
Critical25 Aug 2026
Carhartt
Retail · 12,933,413 records
12,933,413 records exposed, Email addresses, Names, Phone numbers, Physical addresses
25 Aug 2026
Medium25 Aug 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
The Los Angeles County Museum of Art (LACMA) has announced that a breach last year exposed customer and employee information.
25 Aug 2026
Critical25 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
As breach costs reach record highs and defense spending nears $240 billion, owner-run firms are dangerously exposed, threatening supply chain security.
25 Aug 2026
Were you affected?