Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,301
Disclosures in the tracker, all years
2,016
Of those, indexed in 2026
67
Added in October
19
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 19 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
65 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- South Korea10 Oct 2026South Korean banksHow they got in: automated AI tools that work through many organizations at once.BleepingComputer
- South Korea8 Oct 2026Uranium FinanceHow they got in: a known flaw in software the victim ran.BleepingComputer
- South Korea7 Oct 2026Exposed AI server operatorsHow they got in: a system left reachable from the internet.BleepingComputer
- South Korea7 Oct 2026SpotifyThe source does not say how they got in.BleepingComputer
- South Korea7 Oct 2026GoogleHow they got in: a supplier or vendor that was compromised first.BleepingComputer
- South Korea7 Oct 2026Fortinet FortiGate firewall ownersHow they got in: stolen or reused passwords.BleepingComputer
- South Korea7 Oct 2026MonsterCloud customersThe source does not say how they got in.BleepingComputer
Critical18 Aug 2026
A Heights Finance breach
Finance · 1,200,000 records
A Heights Finance breach exposed personal and financial data of over 1.2 million people after hackers compromised a third-party cloud platform. Heights Finance is a U.S. consumer finance company that provides personal…
18 Aug 2026
Critical18 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
A ransomware affiliate calling itself Ransom Busters has been spotted proactively sending emails to victim organizations and claims to delete stolen data from ransomware groups' servers in exchange for a fee ranging…
18 Aug 2026
Medium18 Aug 2026
Organisation not named
Education · Records not stated
The disclosure as indexed does not name the organisation.
The University of Texas at San Antonio, which serves 40,000 students across six campuses, said its IT team identified threat activity on its academic campus over the weekend and took some systems, including phones…
18 Aug 2026
Medium18 Aug 2026
SafePal has
Sector not stated · 40,000 records
SafePal has disclosed that an authorization flaw in an order-tracking plug-in exposed the names, email addresses, shipping addresses, phone numbers, and purchase details of approximately 39,798 customers.
The hardware…
18 Aug 2026
Critical18 Aug 2026
Organisation not named
Finance · 1,200,000 records
The disclosure as indexed does not name the organisation.
Hackers stole names, addresses, phone numbers, Social Security numbers, and financial information from a third-party platform.
The post Heights Finance Data Breach Impacts at Least 1.2 Million Individuals appeared…
18 Aug 2026
High18 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
The first 24 hours after a cyber incident are messy. Teams are moving fast, and a lot gets said on Slack or email that can come back later. People are scrambling to contain the issue, figure out what happened and keep…
18 Aug 2026
High17 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
The breach affected anyone who received a loan through the company or inquired about a loan product through a third party.
17 Aug 2026
Critical17 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
A threat actor is selling employee databases allegedly stolen from the Microsoft Azure infrastructure of multiple Fortune 500 companies after gaining access using compromised credentials.
17 Aug 2026
Medium17 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Pokémon Center is notifying customers in the United Kingdom and Germany that it suffered a third-party data breach after hackers stole customer personal and order information from third-party logistics provider CEVA…
17 Aug 2026
Medium17 Aug 2026
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
The SANDCLOCK LiteLLM supply-chain attack exposed credentials across 2,038 repositories, affecting technology, finance, healthcare, retail and more. Resecurity (USA) estimated the most affected sectors by the “SANDCLOCK”
17 Aug 2026
Medium17 Aug 2026
The crypto hardware wallet company SafePal
Finance · 40,000 records
The crypto hardware wallet company SafePal confirmed a data breach on Sunday, telling users that nearly 40,000 customers had information stolen during a recent security incident.
17 Aug 2026
High17 Aug 2026
Major genetic-testing firm
Healthcare · Records not stated
The June breach, which also exposed employees’ information, underscored the supply-chain risks facing the healthcare sector.
17 Aug 2026
Medium17 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The expensive attacks are not always the clever ones.
This week had plenty of proof. Exposed services got hit, old bugs found fresh use, browser sessions became attack paths, and supply-chain problems kept spreading…
17 Aug 2026
Medium17 Aug 2026
Olivier Acuna
Finance · 200,000 records
Olivier Acuna reports: Cryptocurrency broker Bits of Gold said personal data belonging to roughly 200,000 customers was stolen by hackers, the company reported. The Tel Aviv, Israel-based company reported the security…
17 Aug 2026
Critical17 Aug 2026
Organisation not named
Sector not stated · 2,000,000 records
The disclosure as indexed does not name the organisation.
On August 13, DataBreaches was contacted anonymously on Signal by someone reporting that they had acquired more than 2 million records with clients’ phone numbers, usernames, and email addresses from TaxAct…
17 Aug 2026
Medium17 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Ukraine’s military intelligence claimed it disrupted the operations of Russia’s largest online marketplace, Wildberries, in a cyberattack intended to amplify the impact of drone strikes on the company’s infrastructure.
17 Aug 2026
Critical17 Aug 2026
Organisation not named
Sector not stated · 1,700,000 records
The disclosure as indexed does not name the organisation.
A seller claims 1.7M McDonald’s employee records were stolen from Azure. An 8,000-row sample appears genuine, but its age and full size remain unconfirmed. A seller on a data-trading forum posted an 8,000-row sample…
17 Aug 2026
High17 Aug 2026
Organisation not named
Sector not stated · 40,000 records
The disclosure as indexed does not name the organisation.
Nearly 40,000 customers of hardware wallet provider SafePal have been impacted by a data breach
17 Aug 2026
Medium17 Aug 2026
Organisation not named
Sector not stated · 678,000 records
The disclosure as indexed does not name the organisation.
The French Ministry of the Economy and Finance has disclosed a data breach after an attacker accessed the General Directorate of Public Finances (DGFiP) systems and stole data belonging to 678,000 individuals.
17 Aug 2026
Medium16 Aug 2026
Organisation not named
Sector not stated · 39,798 records
The disclosure as indexed does not name the organisation.
Cryptocurrency hardware wallet provider SafePal is warning of a data breach affecting about 39,798 customers after a flaw was exploited to steal customer order information, and a threat actor is now claiming to be…
16 Aug 2026
Medium16 Aug 2026
Organisation not named
Government · 678,000 records
The disclosure as indexed does not name the organisation.
France’s tax agency says hackers stole data on 678,000 taxpayers, including income and tax details, in a sophisticated cyberattack. A threat actor claimed to have breached France’s tax agency in late June.…
16 Aug 2026
Medium16 Aug 2026
Caroline Yaffa
Government · Records not stated
Caroline Yaffa reports: The Wake County Board of Elections is suspending its use of a software vendor after it reported a possible cyberattack. There’s no evidence that voting machines, ballots, voter registration…
16 Aug 2026
Critical15 Aug 2026
PIH Health
Healthcare · 2,950,000 records
2024 hacking incident affected 2.95M patients; ransomware attack on healthcare provider
15 Aug 2026
Medium15 Aug 2026
Sax
Sector not stated · Records not stated
Data breach disclosed covering 2024 incident
15 Aug 2026
Were you affected?