Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,358
Disclosures in the tracker, all years
2,074
Of those, indexed in 2026
135
Added in October
18
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 28 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Medium31 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Anthropic found Claude accessed systems at three real businesses after a testing error gave its AI models live internet access during cybersecurity evaluations.
31 Jul 2026
Critical31 Jul 2026
Weaponizing Exposed Data
Sector not stated · Records not stated
Lab-1 Dark-web Research Team Contributors:Alex Necula, Anastasia Sentasnova, Ellis Stannard, Jeffrey Bell, Manuel Boll, Valéry Rieß-Marchive Mannie W writes: Ransomware and data-extortion groups are moving beyond bulk…
31 Jul 2026
Medium31 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
A Chinese-speaking threat actor is using the DeepSeek AI model and the open-source Hermes Agent to conduct autonomous cyberattacks on exposed servers with limited human involvement.
31 Jul 2026
Medium31 Jul 2026
Anthropic
Sector not stated · Records not stated
Claude maker Anthropic said its AI models escaped test environments and breached networks at three companies on the open internet.
31 Jul 2026
Medium31 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
A security company’s systems were hacked after it installed a malicious Python package deployed by Claude.
The post Prompted by OpenAI Disclosure, Anthropic Finds Its Own Models Hacked 3 Organizations appeared first…
31 Jul 2026
Medium31 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Named CosmosEscape, the vulnerability exposed the primary key for Cosmos DB accounts, granting full read and write access.
The post Critical Flaw Led to Azure Cosmos DB Pwnage appeared first on SecurityWeek.
31 Jul 2026
Medium31 Jul 2026
Less than two weeks after OpenAI
Technology · Records not stated
Less than two weeks after OpenAI disclosed that an experimental AI model breached Hugging Face during a cybersecurity evaluation, Anthropic has revealed that its own review uncovered three incidents in which Claude…
31 Jul 2026
High31 Jul 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
In March 2026, hackers stole personal, financial, and medical information from the company’s AWS environment.
The post CareCloud Data Breach Impacts Over 350,000 appeared first on SecurityWeek.
31 Jul 2026
Critical30 Jul 2026
A coordinated attack
Finance · 1,700 records
A coordinated cyberattack that targeted more than 30 Minnesota community water systems has alarmed industrial cybersecurity experts, not because it caused widespread disruption, but because it appears to represent the…
30 Jul 2026
Medium30 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
CISA is urging water and wastewater utilities to lock down internet-exposed controllers, days after intrusions hit dozens of Minnesota systems.
The post CISA Urges Water Sector to Protect OT After Coordinated Attacks…
30 Jul 2026
Medium30 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
In a filing for federal regulators, Massachusetts-based Analog Devices said intruders had exfiltrated data from its networks earlier this summer, but the scope of the incident is still under investigation.
30 Jul 2026
Medium30 Jul 2026
Residential security company Brinks Home has
Sector not stated · Records not stated
Residential security company Brinks Home has disclosed that hackers breached some of its systems and are threatening to leak allegedly stolen data.
30 Jul 2026
Critical30 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Cyberattack tools and infrastructure used by North Korea’s Lazarus Group appear to have been shared with ransomware criminals targeting South Korean organizations, further evidence of deepening entanglement between…
30 Jul 2026
Medium30 Jul 2026
Analog Devices
Sector not stated · Records not stated
American semiconductor company Analog Devices announced that an unauthorized party accessed some of its systems and exfiltrated certain files.
30 Jul 2026
Critical30 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Two years after a malware incident that was not handled in accordance with South Korea’s requirements, KT has been fined. Lee Jin-seok reports: KT has been fined more than 53.9 billion won [USD $37,630,484.43]…
30 Jul 2026
Medium30 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Hackers were detected on Analog Devices systems in June, and an investigation found that they stole files.
The post Semiconductor Firm Analog Devices Discloses Data Breach appeared first on SecurityWeek.
30 Jul 2026
Medium29 Jul 2026
OpenAI agent used
Sector not stated · Records not stated
In a new update, OpenAI says its AI models also used publicly exposed credentials to compromise accounts on four third-party services during the recent attack on Hugging Face, expanding the scope of the four-day…
29 Jul 2026
Medium29 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
The Minnesota IT Services (MNIT) agency activated its cybersecurity incident response capabilities across the entire state after hackers targeted more than 30 community water systems in "a coordinated cyberattack."
29 Jul 2026
Medium29 Jul 2026
A coordinated cyberattack
Government · Records not stated
A coordinated cyberattack targeted operational technology at more than 30 Minnesota community water systems on July 26 and 27, triggering a statewide cybersecurity response.
Braham, Plymouth, South St. Paul and Maple…
29 Jul 2026
Critical29 Jul 2026
Cyberattack
Sector not stated · Records not stated
Angola’s largest telecommunications operator, Unitel, was hit by a cyberattack that has left millions of people nationwide without voice services, mobile data, and internet access.
29 Jul 2026
Critical29 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
IBM Cost of a Data Breach Report warns that the global average cost of a data breach has reached a record high of $4.99m, and AI-backed attacks have played a role
29 Jul 2026
Medium29 Jul 2026
OpenAI on Tuesday
Sector not stated · Records not stated
OpenAI on Tuesday revealed the rogue artificial intelligence (AI) agent that escaped its sealed evaluation environment and broke into Hugging Face's production environment, and also hacked multiple third-party accounts…
29 Jul 2026
Medium28 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Lots of Internet-exposed server management controllers are subject to offline password-cracking attacks, and adversaries have taken note.
28 Jul 2026
Medium28 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The U.S. and Australian governments have released new guidance urging critical infrastructure organizations to prepare to isolate vital operational technology systems in the event of a cyberattack or other major…
28 Jul 2026
Were you affected?