Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,336
Disclosures in the tracker, all years
2,049
Of those, indexed in 2026
104
Added in October
24
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 24 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Medium10 Aug 2026
Organisation not named
Legal · Records not stated
The disclosure as indexed does not name the organisation.
Atlassian’s enterprise AI assistant Rovo, which is usually connected across sensitive work environments like Slack, Microsoft 365, and Google Workspace, was found vulnerable to data leaks through malicious instructions.
10 Aug 2026
Medium10 Aug 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
Three separate research efforts last week demonstrated ways to defeat passkey protections without breaking the cryptography they rest on.
Passkeys are designed to replace reusable passwords and resist phishing. The…
10 Aug 2026
Medium10 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The current GPT-5.6-Sol has been assigned a ‘high’ cybersecurity threshold, but Astra could reach the maximum ‘critical’ threshold.
The post OpenAI’s Upcoming Astra Model Raises Autonomous Cyberattack Concerns…
10 Aug 2026
Medium10 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The incident occurred on the same day as coordinated cyberattacks struck more than 30 other renewable energy installations and a larger heat plant, as Poland publicly disclosed in January.
10 Aug 2026
Critical10 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Breached via private APN; supplies heat to approximately 50,000 residents
10 Aug 2026
High10 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Heat and power facility supplying 50,000 residents breached via private APN exploitation
10 Aug 2026
High10 Aug 2026
7-Eleven
Retail · Records not stated
Data breach exposed current, former, and prospective franchisees' detailed application packages
10 Aug 2026
High10 Aug 2026
Ontario Health atHome
Healthcare · Records not stated
Vendor ransomware attack exposed data, kept under wraps for months
10 Aug 2026
Critical10 Aug 2026
Fortinet FortiGate Systems
Technology · Records not stated
73,932 FortiGate firewall credentials exposed including admin and VPN credentials
10 Aug 2026
Critical10 Aug 2026
135K law enforcement contacts leaked to dark web
Government · Records not stated
135K law enforcement contacts leaked to dark web
10 Aug 2026
Critical10 Aug 2026
US Civil Service/White House
Government · Records not stated
Thousands of civil servants' passwords exposed including White House-linked credentials since early 2024
10 Aug 2026
High10 Aug 2026
KT
Technology · Records not stated
Personal data breach via illegal base stations caused unauthorized micropayments; fined 53.9 billion won
10 Aug 2026
High10 Aug 2026
US Government civil services
Government · Records not stated
Thousands of civil servants' passwords exposed including White House linked credentials since early 2024
10 Aug 2026
Critical10 Aug 2026
100K+ officers and staff contacts exposed
Government · Records not stated
100K+ officers and staff contacts exposed
10 Aug 2026
Critical10 Aug 2026
CareCloud Health
Healthcare · 350,000 records
350K patients: SSNs, financials, medical records stolen
10 Aug 2026
Critical10 Aug 2026
10 Aug 2026
Critical10 Aug 2026
VITAS Hospice Services
Healthcare · 300,000 records
300K patient records with SSNs and medical data
10 Aug 2026
High10 Aug 2026
Morguard Real Estate
Finance · Records not stated
Data theft threat after failed ransom negotiations
10 Aug 2026
Critical10 Aug 2026
UK Police Legal Database
Government · Records not stated
135K law enforcement contact records leaked
10 Aug 2026
Critical10 Aug 2026
Blue Cross Blue Shield
Healthcare · Records not stated
Massive data breach; company allegedly knew about breach and delayed reporting; Montana insurance investigation
10 Aug 2026
High10 Aug 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Healthcare advocacy vendor cybersecurity incident exposed employees' social security numbers
10 Aug 2026
Critical10 Aug 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patients exposed in PEAR ransomware attack; healthcare billing and practice-management data
10 Aug 2026
High10 Aug 2026
Valve
Technology · Records not stated
Steam hardware customer data stolen; European customers notified
10 Aug 2026
High10 Aug 2026
Suno
Technology · Records not stated
Customer records exposed revealing AI music training methods; notification delays reported
10 Aug 2026
Were you affected?