Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,306
Disclosures in the tracker, all years
2,020
Of those, indexed in 2026
69
Added in October
19
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 20 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
68 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- South Korea10 Oct 2026South Korean banksHow they got in: automated AI tools that work through many organizations at once.BleepingComputer
- South Korea8 Oct 2026Uranium FinanceHow they got in: a known flaw in software the victim ran.BleepingComputer
- South Korea7 Oct 2026Exposed AI server operatorsHow they got in: a system left reachable from the internet.BleepingComputer
- South Korea7 Oct 2026SpotifyThe source does not say how they got in.BleepingComputer
- South Korea7 Oct 2026GoogleHow they got in: a supplier or vendor that was compromised first.BleepingComputer
- South Korea7 Oct 2026Fortinet FortiGate firewall ownersHow they got in: stolen or reused passwords.BleepingComputer
- South Korea7 Oct 2026MonsterCloud customersThe source does not say how they got in.BleepingComputer
High11 Aug 2026
Cure Dental
Healthcare · Records not stated
Dental practice data breach exposed PII of current and former patients
11 Aug 2026
High11 Aug 2026
Chick-fil-A
Retail · Records not stated
Customer loyalty accounts compromised; hackers accessed names, emails using stolen credentials across multiple states
11 Aug 2026
High11 Aug 2026
Clover Health
Healthcare · Records not stated
Health insurer data breach disclosed; type and extent of exposed data unknown at disclosure
11 Aug 2026
Critical11 Aug 2026
Ceva Logistics
Sector not stated · Records not stated
Shipping company data breach exposed personal data of customers across banks, retailers, and gamers
11 Aug 2026
Critical11 Aug 2026
100K+ officer contact records exfiltrated
Government · Records not stated
100K+ officer contact records exfiltrated
11 Aug 2026
Critical11 Aug 2026
AnMed Health System
Healthcare · Records not stated
83 facilities closed in ongoing ransomware attack
11 Aug 2026
Critical11 Aug 2026
Loyalist College Ontario
Education · Records not stated
Student and staff data stolen in ransomware
11 Aug 2026
Critical11 Aug 2026
CareCloud Health Platform
Healthcare · 345,000 records
345K patient SSNs and payment records stolen
11 Aug 2026
High11 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Hackers breached facility supplying heat to 50,000 residents via private APN
11 Aug 2026
High11 Aug 2026
Cerner
Healthcare · Records not stated
Patient data breach at healthcare systems affecting Huntsville Hospital Health System
11 Aug 2026
Critical11 Aug 2026
MCBS
Healthcare · 1,200,000 records
Medical business management company data breach exposed over 1.2 million individuals' records
11 Aug 2026
Critical11 Aug 2026
100K+ police officer contact records leaked
Government · Records not stated
100K+ police officer contact records leaked
11 Aug 2026
Critical11 Aug 2026
Snowflake Platform Breach
Technology · 165,000,000 records
165 orgs hit, billions of records stolen
11 Aug 2026
High11 Aug 2026
Barclay Damon Law Firm
Legal · Records not stated
Internal legal data exfiltrated by BusinessDataLeaks
11 Aug 2026
Critical11 Aug 2026
11 Aug 2026
Critical11 Aug 2026
Alcon Pharma
Healthcare · Records not stated
25M Salesforce PII records stolen by ShinyHunters
11 Aug 2026
Critical11 Aug 2026
Questal IT Services
Technology · Records not stated
21M Salesforce PII records stolen by ShinyHunters
11 Aug 2026
Critical11 Aug 2026
100K+ officer and staff contact records exposed
Government · Records not stated
100K+ officer and staff contact records exposed
11 Aug 2026
Critical11 Aug 2026
Canvas Instructure
Education · 275,000,000 records
275M users compromised across 8,800 institutions
11 Aug 2026
Medium10 Aug 2026
Organisation not named
Legal · Records not stated
The disclosure as indexed does not name the organisation.
Atlassian’s enterprise AI assistant Rovo, which is usually connected across sensitive work environments like Slack, Microsoft 365, and Google Workspace, was found vulnerable to data leaks through malicious instructions.
10 Aug 2026
Medium10 Aug 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
Three separate research efforts last week demonstrated ways to defeat passkey protections without breaking the cryptography they rest on.
Passkeys are designed to replace reusable passwords and resist phishing. The…
10 Aug 2026
Medium10 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The current GPT-5.6-Sol has been assigned a ‘high’ cybersecurity threshold, but Astra could reach the maximum ‘critical’ threshold.
The post OpenAI’s Upcoming Astra Model Raises Autonomous Cyberattack Concerns…
10 Aug 2026
Medium10 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The incident occurred on the same day as coordinated cyberattacks struck more than 30 other renewable energy installations and a larger heat plant, as Poland publicly disclosed in January.
10 Aug 2026
Critical10 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Breached via private APN; supplies heat to approximately 50,000 residents
10 Aug 2026
Were you affected?