Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,324
Disclosures in the tracker, all years
2,039
Of those, indexed in 2026
95
Added in October
22
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 23 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Twelve months
Disclosures indexed each month.
Counted on the date each disclosure was recorded in the index. The current month is shown in red and is still open. A phone shows the last six months.
Worldwide · How they got in
Incidents worldwide, by country.
71 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- New Zealand20 Oct 2026Crime Stoppers Guelph WellingtonThe source does not say how they got in.CTV News
Critical22 Oct 2026
Capcom
Sector not stated · 11,700,000 records
Japanese gaming giant Capcom has confirmed that hackers breached its membership service, CAPCOM ID, exposing more than 11.7 million customer email addresses and associated information.
22 Oct 2026
Medium22 Oct 2026
LiteLLM release pipeline
Sector not stated · Records not stated
Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables.
22 Oct 2026
Medium22 Oct 2026
ThreatsDay
Sector not stated · Records not stated
This week has already been rough for cybersecurity. Critical PHP and GitLab RCE flaws, serious Linux security bugs, compromised eMudhra certificates, a Node.js RCE flaw, a hacked LiteLLM release, and hundreds of…
22 Oct 2026
Medium22 Oct 2026
LiteLLM release pipeline
Technology · Records not stated
Hackers hijacked the software release pipeline of LiteLLM, a popular open-source AI gateway, to distribute credential-stealing malware, marking the project’s second supply chain compromise this year despite security…
22 Oct 2026
Medium21 Oct 2026
Japan's Onamae Desktop Cloud
Technology · 26,739 records
Hackers compromised the infrastructure of Onamae Desktop Cloud, a popular provider of VPS services in Japan, and installed malware on up to 26,739 customers' servers.
21 Oct 2026
Medium20 Oct 2026
PHP
Sector not stated · Records not stated
The PHP security team is warning administrators to prepare for emergency security updates tomorrow to address two critical vulnerabilities, as information about the flaws has reportedly leaked ahead of their scheduled…
20 Oct 2026
High20 Oct 2026
Organisation not named
Healthcare · 5,461 records
The disclosure as indexed does not name the organisation.
Data breach affected 5,461 patients, exposing sensitive health information.
20 Oct 2026
Medium20 Oct 2026
California
Government · Records not stated
The CDE released multiple statements over the last week warning the state’s students that assessment contractor Educational Testing Service (ETS) suffered a months-long data breach.
20 Oct 2026
Medium20 Oct 2026
Ahold Delhaize
Retail · Records not stated
Ahold Delhaize, one of the world's largest food retail chains, confirmed that last week's cyberattack disrupted services at stores across Europe and the United States.
20 Oct 2026
Medium20 Oct 2026
Assurance Retraite
Government · 70,372 records
70,372 records exposed, Dates of birth, Email addresses, Family members' names, Government issued IDs and 5 more
20 Oct 2026
Critical19 Oct 2026
Nikkei
Sector not stated · 1,800,000 records
Nikkei Inc. disclosed a new data breach, the third in about a month, that exposed 1.83 million personal information records.
19 Oct 2026
Medium19 Oct 2026
OpenCode hack
Technology · Records not stated
The open-source AI coding project OpenCode has notified a small number of users that API keys they used with external providers were exposed in a security breach.
19 Oct 2026
Medium19 Oct 2026
ConnectWise backup credentials
Finance · Records not stated
ConnectWise has disabled key cloud services and is investigating unauthorized access to customers’ Microsoft 365 environments after a credential tied to its Cloud Backup platform was compromised and used to…
19 Oct 2026
Medium19 Oct 2026
Ahold Delhaize
Sector not stated · Records not stated
Ahold Delhaize, the Dutch multinational grocery retailer, said Monday that a cyberattack forced it to take systems offline across most of its U.S. and European brands, impacting shoppers on both sides of the Atlantic.
19 Oct 2026
Critical18 Oct 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter IronChain Ransomware Threatens Businesses with Permanent Data…
18 Oct 2026
High18 Oct 2026
Organisation not named
Education · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack on UIC College of Medicine resulted in theft of some information.
18 Oct 2026
Medium18 Oct 2026
Unnamed UK airport
Sector not stated · Records not stated
Ransomware attackers released stolen data from cyberattack on a UK airport.
18 Oct 2026
Critical18 Oct 2026
Organisation not named
Government · 3,000,000 records
The disclosure as indexed does not name the organisation.
Personal information of 3 million people exposed in breach of Pentagon personnel agency.
18 Oct 2026
High18 Oct 2026
Asos
Retail · Records not stated
Breach exposed customer data beyond basic contact details, per BBC investigation after hackers claimed to have taken more information than first disclosed.
18 Oct 2026
High18 Oct 2026
Utility account data
Sector not stated · 400,000 records
Utility account data breached, affecting roughly 400,000 customers of Georgia Power and Alabama Power.
18 Oct 2026
High18 Oct 2026
Driver records
Government · Records not stated
Driver records breached; state is mailing breach notification letters and offering affected drivers $1M identity theft insurance and credit monitoring.
18 Oct 2026
Medium18 Oct 2026
Gîtes de France
Retail · 117,574 records
117,574 records exposed, Booking details, Email addresses, Names, Phone numbers and 1 more
18 Oct 2026
Critical16 Oct 2026
Baltimore suburb
Government · Records not stated
Anne Arundel County, Maryland, said an intruder stole files from government systems, and investigators are working to assess how much data was exposed.
16 Oct 2026
Critical16 Oct 2026
Organisation not named
Sector not stated · 11,000,000 records
The disclosure as indexed does not name the organisation.
Burger King Japan, the Japanese subsidiary of global fast-food giant Burger King, disclosed a major data breach after attackers accessed a server containing 11.18 million customer records.
16 Oct 2026
Were you affected?