Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,339
Disclosures in the tracker, all years
2,052
Of those, indexed in 2026
111
Added in October
18
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 25 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
74 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- Russia23 Oct 2026PingCAPHow they got in: stolen or reused passwords.SecurityWeek
High14 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Hackers breached heat-and-power facility supplying 50,000 residents via private APN access point
14 Aug 2026
High14 Aug 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Patient health information compromised in 2025 breach affecting hospital system
14 Aug 2026
Critical14 Aug 2026
Exposed Credential Elasticsearch DB
Technology · Records not stated
24B stolen credentials exposed publicly
14 Aug 2026
High14 Aug 2026
14 Aug 2026
Critical14 Aug 2026
US Homeland Security
Government · Records not stated
HSIN government network confirmed breached
14 Aug 2026
Critical14 Aug 2026
Snowflake Customer Cluster
Technology · 165,000,000 records
165 orgs breached, billions of records stolen
14 Aug 2026
High14 Aug 2026
14 Aug 2026
High14 Aug 2026
Cambria Law Firm Canada
Legal · Records not stated
INC_RANSOM ransomware, firm data exfiltrated
14 Aug 2026
Medium14 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Records held in Salesforce and ServiceNow systems are under attack leaving user data exposed, according to researchers at Reco.
The attack appears similar to those perpetrated by the extortion group ShinyHunters…
14 Aug 2026
High14 Aug 2026
NHS
Healthcare · 900,000 records
STILL, NHS? Martin Bagot reports: The NHS has admitted a data breach by sending patients’ personal information over pager devices. A BBC investigation found sensitive medical data of transplant patients was routinely…
14 Aug 2026
Medium14 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
AmnesiaStealer contains novel functions, including the attackers gaining remote control over the victim’s browser to steal cookie data
14 Aug 2026
Critical14 Aug 2026
RingCentral data breach
Sector not stated · 1,600,000 records
The ShinyHunters extortion group stole personal information from 1.6 million RingCentral accounts after hacking the company in July, according to the data breach notification service monitored breach databases.
14 Aug 2026
Critical14 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Akira ransomware affiliates were seen using a new technique to evade endpoint detection and response (EDR), where they rebooted a compromised Windows system into Safe Mode with Networking enabled.
According to…
14 Aug 2026
Medium14 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The root cause of the incident is believed to be a compromised AWS access key that was exposed in publicly available JavaScript build artifacts.
The post Over 1,000 Charities Hit by Beacon CRM Data Breach appeared…
14 Aug 2026
Critical14 Aug 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
A former data analyst contractor for Brightly Software has been sentenced to two years in prison for targeting his employer in a $2.5 million extortion scheme.
14 Aug 2026
Medium14 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The Rust-based macOS infostealer harvests users’ passwords, keychain information, Chromium-based browser data, and Safari cookies.
The post AmnesiaStealer macOS Malware Steals Data, Controls Browser Sessions appeared…
14 Aug 2026
Critical14 Aug 2026
Snowflake Breach Guilty Plea
Technology · 165,000,000 records
165 orgs compromised, billions of records stolen
14 Aug 2026
Critical14 Aug 2026
Brightspeed Telecom
Technology · 1,000,000 records
1M+ customer records stolen in ransomware
14 Aug 2026
Critical14 Aug 2026
Exposed Credential Database
Technology · Records not stated
24B stolen credentials in 8.3TB public exposure
14 Aug 2026
Critical14 Aug 2026
100K+ police officer records leaked
Government · Records not stated
100K+ police officer records leaked
14 Aug 2026
Critical14 Aug 2026
General Electric
Sector not stated · Records not stated
Data stolen by Clop ransomware group
14 Aug 2026
Critical14 Aug 2026
14 Aug 2026
Critical13 Aug 2026
Unnamed medical billing company
Healthcare · 1,300,000 records
Ransomware attack exposing protected health data on 1.3 million people
13 Aug 2026
High13 Aug 2026
Personal and medical information including SSNs
Healthcare · Records not stated
Personal and medical information including SSNs exposed in data breach
13 Aug 2026
Were you affected?