Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,359
Disclosures in the tracker, all years
2,075
Of those, indexed in 2026
136
Added in October
15
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 29 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
75 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- Singapore22 Oct 2026GenesysThe source does not say how they got in.The Hacker News
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Poor security at criminal records office led to sensitive data leak exposure
1 Aug 2026
Critical1 Aug 2026
SplitVPN
Technology · 865,000 records
865,000 users' personal records exposed in data breach of Russian VPN provider
1 Aug 2026
High1 Aug 2026
Shipping partner breach
Technology · Records not stated
Shipping partner breach exposed names, addresses, and order data of European Steam hardware customers
1 Aug 2026
High1 Aug 2026
Allstate
Finance · Records not stated
Breach claimed to involve employee-related records; scope of exposure still unclear
1 Aug 2026
High1 Aug 2026
Valve (CEVA Logistics)
Technology · Records not stated
European logistics partner CEVA Logistics breached, exposing Steam hardware customer names, addresses, and order data
1 Aug 2026
High1 Aug 2026
Steam shipping partner CEVA Logistics breach
Technology · Records not stated
Steam shipping partner CEVA Logistics breach exposed names, addresses, and order data of European hardware customers
1 Aug 2026
High1 Aug 2026
Sensitive data
Government · Records not stated
Sensitive data leak due to woeful security, unpatched CMS and unread alerts
1 Aug 2026
Critical1 Aug 2026
LiteLLM
Technology · Records not stated
AI supply chain attack exposed 2,500+ companies and 434,000 CI/CD pipelines
1 Aug 2026
High1 Aug 2026
HCL Technologies
Technology · Records not stated
Hacker group claimed access to employee data; company disputes claim and states data may be years-old
1 Aug 2026
High1 Aug 2026
CareCloud Inc.
Healthcare · 345,000 records
Cyberattack exposed data on 345,000 patients including protected health information
1 Aug 2026
High1 Aug 2026
Metropolitan Police Service
Government · Records not stated
Data protection failures including unredacted documents sent to stalkers and bulk email breaches
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Coordinated cyberattacks on 30+ renewable energy installations and heat plants; second incident hidden for months
1 Aug 2026
High1 Aug 2026
CareCloud
Healthcare · 345,000 records
Cyberattack and data theft notified more than 345,000 patients of exposure
1 Aug 2026
Critical1 Aug 2026
IEH Corporation
Government · Records not stated
Military device manufacturer disclosed cyber incident affecting products for satellites, missiles, and jets
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
Healthcare billing company; 1.26 million patients exposed in PEAR ransomware attack
1 Aug 2026
High1 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack with data deletion confirmation from hacker gang
1 Aug 2026
High1 Aug 2026
New Jersey Law Firm
Legal · 13,000 records
Cyberattack exposed hospital records of nearly 13,000 patients to hackers
1 Aug 2026
Critical1 Aug 2026
Ceva Logistics
Sector not stated · Records not stated
Data breach exposed personal data from multiple companies relying on Ceva for shipping, affecting banks, retailers, and Steam gamers
1 Aug 2026
High1 Aug 2026
Klaviyo
Technology · Records not stated
Marketing tech platform inadvertently shared sign-up information including passwords to dozens of advertisers
1 Aug 2026
Critical1 Aug 2026
Thailand Digital Ministry
Government · Records not stated
221 million exposed login records from state systems
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
UK police, government and customer contact details compromised and exposed on dark web
1 Aug 2026
Critical1 Aug 2026
MCBS Medical Billing
Healthcare · 1,260,000 records
1.26 million patients exposed in PEAR ransomware attack on billing and practice-management company
1 Aug 2026
High1 Aug 2026
Law firm (New Jersey)
Legal · 13,000 records
Cyberattack exposing hospital records and personal information on nearly 13,000 patients
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records of police and government exposed on dark web by ExfilSquad
1 Aug 2026
Were you affected?