Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,339
Disclosures in the tracker, all years
2,052
Of those, indexed in 2026
111
Added in October
18
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 25 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
74 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- Russia23 Oct 2026PingCAPHow they got in: stolen or reused passwords.SecurityWeek
Critical29 Aug 2026
PEAR
Healthcare · Records not stated
SuspectFile reports: A cyberattack against a Texas healthcare organization allegedly resulted in the exfiltration of approximately 1.4 TB of data, according to claims made by the ransomware group PEAR. The alleged…
29 Aug 2026
Medium29 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
A cyberattack caused disruptions at the toy and game giant earlier this year and the company is now disclosing a data breach.
The post Hasbro Data Breach Exposed Employee Personal Information appeared first on…
29 Aug 2026
Critical29 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Berlin ‘s government faces a Rhysida ransomware attack weeks before elections, with officials refusing to pay despite a claimed 5.79 TB data theft. Berlin’s state government confirmed this week it’s…
29 Aug 2026
Medium29 Aug 2026
An alleged Chinese-speaking actor
Sector not stated · Records not stated
An alleged Chinese-speaking actor breached Philippine nuclear and naval targets by exploiting known flaws, stealing sensitive data. A suspected Chinese-speaking operator targeted a Philippine nuclear research body and…
29 Aug 2026
Critical29 Aug 2026
McKesson is
Healthcare · 284,000,000 records
Lawrence Abrams reports: Healthcare and pharmaceutical distribution giant McKesson has disclosed a cybersecurity incident involving unauthorized access to third-party applications and data theft, with the ShinyHunters…
29 Aug 2026
Critical29 Aug 2026
Berlin's state government has
Government · Records not stated
Berlin's state government has confirmed that it is the target of an extortion attempt following the August compromise of the city's state administrative network, and said it will not meet the extortionists' demands.…
29 Aug 2026
Critical28 Aug 2026
McKesson
Healthcare · 284,000,000 records
Healthcare and pharmaceutical distribution giant McKesson has disclosed a cybersecurity incident involving unauthorized access to third-party applications and data theft, with the ShinyHunters extortion group claiming…
28 Aug 2026
Medium28 Aug 2026
Love Electric Breach
Sector not stated · Records not stated
Love Electric’s alleged data breach exposes sensitive driver data and highlights the identity risks created by third-party salary sacrifice providers. A seller on an English-language data-breach forum claimed on…
28 Aug 2026
Medium28 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The frustrating reality after an OT cyberattack: no data, no trail, and no history.
28 Aug 2026
Medium28 Aug 2026
Matt Trewern
Healthcare · Records not stated
Matt Trewern reports on another charity hit by the Beacon CRM data breach that affected more than 1,000 charities and non-profits: People using an HIV charity have been told their “sensitive and personal”…
28 Aug 2026
Critical28 Aug 2026
Winona County
Finance · Records not stated
WXOW in Minnesota reports: Winona County paid more than $128,000 following a January ransomware attack, according to a county news release. The county said it negotiated and paid $128,539.57 with assistance from its…
28 Aug 2026
High28 Aug 2026
Toy-making giant Hasbro
Finance · Records not stated
Hasbro, one of the world's largest toy and game companies, has disclosed that attackers have accessed the personal and financial information of an undisclosed number of employees.
28 Aug 2026
Critical28 Aug 2026
A cyberattack on Manchester Airports Group
Sector not stated · 8,700,000 records
A cyberattack on Manchester Airports Group exposed data of 8.7 million customers across Manchester, Stansted, and East Midlands airports. Manchester Airports Group disclosed that an unauthorised third party accessed…
28 Aug 2026
Medium27 Aug 2026
Manchester Airports Group
Sector not stated · Records not stated
The Manchester Airports Group (MAG) disclosed that hackers breached its systems and stole customer data, including Wi-Fi sign-ups from Manchester, Stansted, and East Midlands airports.
27 Aug 2026
Medium27 Aug 2026
Manchester Airports Group
Sector not stated · Records not stated
Gabriel Higgins reports: Manchester Airports Group (MAG) has confirmed that it has been the target of a cybersecurity incident carried out by an unauthorised third party, resulting in the exposure of a quantity of…
27 Aug 2026
Critical27 Aug 2026
A spokesperson
Sector not stated · 8,700,000 records
A spokesperson told The Yorkshire Post that roughly 8.7 million people were impacted, although they did not provide a date range. They added that in the “vast majority” of cases, the only information accessed was an…
27 Aug 2026
Medium27 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Customer data linked to bookings and airport Wi-Fi registrations at Manchester, Stansted and East Midlands airports has been accessed by an unauthorized third party
27 Aug 2026
Medium27 Aug 2026
Brian Krebs
Government · Records not stated
Brian Krebs reports: Authorities in Australia have arrested two men believed to be members of TeamPCP, a prolific cybercrime and data extortion group blamed for perpetrating the longest running spree of software supply…
27 Aug 2026
Critical27 Aug 2026
DOJ firearms agency
Government · Records not stated
The Bureau of Alcohol, Tobacco, Firearms and Explosives confirmed it experienced a cyberattack on a system containing investigation information, as a prolific ransomware gang claimed to have carried out the breach.
27 Aug 2026
High27 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Authorities in Australia have arrested two men believed to be members of TeamPCP, a prolific cybercrime and data extortion group blamed for perpetrating the longest running spree of software supply chain attacks ever.…
27 Aug 2026
Critical27 Aug 2026
Carhartt data breach
Sector not stated · 12,900,000 records
The ShinyHunters extortion group has published sensitive data from nearly 13 million accounts stolen from clothing retailer giant Carhartt earlier this month, according to data breach notification service Have I Been…
27 Aug 2026
Medium27 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The cybersecurity incident has disrupted Boston Scientific’s ability to process and ship customer orders.
The post Cyberattack Causes Global Disruption at Boston Scientific appeared first on SecurityWeek.
27 Aug 2026
Medium27 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The pro-Russian hacker group Server Killers claimed responsibility for the attack.
The post Pro-Russian Hackers Claim Responsibility for Major Cyberattack on Norway’s Public Digital Services appeared first on…
27 Aug 2026
Medium26 Aug 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
The company released a statement and filed documents with the Securities and Exchange Commission (SEC) saying a cybersecurity incident was discovered on Tuesday.
26 Aug 2026
Were you affected?