Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,339
Disclosures in the tracker, all years
2,052
Of those, indexed in 2026
111
Added in October
18
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 25 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Medium5 Aug 2026
Inter-Con Security
Technology · 276,114 records
276,114 records exposed, Email addresses, Employers, Job titles, Names and 2 more
5 Aug 2026
Medium5 Aug 2026
Liechtenstein Government
Government · Records not stated
31K beneficial ownership records exposed
5 Aug 2026
High5 Aug 2026
5 Aug 2026
High5 Aug 2026
Cookeville Regional Medical Center
Healthcare · 330,000 records
330K patient records compromised in ransomware
5 Aug 2026
High5 Aug 2026
Canadian Credit Firm
Finance · 28,000 records
55GB PII and financial records of 28K customers
5 Aug 2026
Critical5 Aug 2026
5 Aug 2026
Critical5 Aug 2026
Basic-Fit Gym Operator
Sector not stated · Records not stated
1M members bank and personal data breached
5 Aug 2026
Critical5 Aug 2026
Paidwork Gig Platform
Technology · 23,300,000 records
23.3M accounts with bank details leaked
5 Aug 2026
Critical5 Aug 2026
CareCloud Health Tech
Healthcare · 350,000 records
350K patient medical and financial records exposed
5 Aug 2026
Critical5 Aug 2026
Suno AI Music
Technology · 55,300,000 records
55.3M accounts leaked with partial payment data
5 Aug 2026
Critical5 Aug 2026
5 Aug 2026
High5 Aug 2026
Cookeville Regional Medical Center
Healthcare · 330,000 records
330K patient records exposed in ransomware attack
5 Aug 2026
Medium5 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
3 Paperclip flaws exposed data & allowed unauthenticated command execution in two deployment modes
5 Aug 2026
Medium5 Aug 2026
Dutch retailer De Bijenkorf
Sector not stated · Records not stated
Amsterdam-based luxury goods chain De Bijenkorf is the latest retailer to announce a cyber incident involving a third-party logistics provider.
5 Aug 2026
Critical5 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
I was mapping the command-and-control infrastructure behind a state-linked intrusion set when the query came back and effectively ended the exercise I thought I was running.
The malware resolved its C2 address by…
5 Aug 2026
High5 Aug 2026
Organisation not named
Healthcare · 102,215 records
The disclosure as indexed does not name the organisation.
Brazil's SISVISA health surveillance system left 102,215 files totaling 79GB open online, including tax IDs and identity documents, without password protection.
5 Aug 2026
Critical5 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Unitel, Angola's dominant mobile operator, continues to recover from a cyberattack that caused outages the day of the government-owned telco's public offering.
5 Aug 2026
Medium4 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
The UK’s Police National Legal Database and Ask the Police service have been breached
4 Aug 2026
Medium4 Aug 2026
Swiss federal IT office
Government · 200 records
SwissInfo.ch reports: Following a cyberattack on the SharePoint servers operated by the Federal Office of Information Technology, Systems and Telecommunication (FOITT), access via the internet has been blocked for…
4 Aug 2026
Medium4 Aug 2026
Swiss IT agency
Government · Records not stated
The Federal Office for Information Technology and Communications (BIT) said specialists detected anomalies in on-premises Microsoft servers. The Swiss agency could not confirm exactly how the hackers got in.
4 Aug 2026
Medium4 Aug 2026
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Reports said intruders appeared to gain access to the Jira environment and other sensitive data of the Żabka retail chain. The company confirmed an intrusion occurred in late July.
4 Aug 2026
Medium3 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
A hacker has drained nearly $89m from Coldcard Bitcoin wallets after exploiting a legacy bug
3 Aug 2026
Critical3 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
The Police National Legal Database (PNLD) has confirmed that police, government and customer contact information was compromised and published on the dark web.
The data included names, organisations and work email…
3 Aug 2026
Medium3 Aug 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
An unknown Chinese-speaking threat actor has been observed running a campaign targeting Apple iOS devices by leveraging a publicly leaked version of the DarkSword exploit kit.
Attack surface management platform Censys…
3 Aug 2026
Were you affected?