Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,574
Disclosures in the tracker, all years
2,089
Of those, indexed in 2026
8
Added in November
22
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 3 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
78 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- Taiwan3 Nov 2026Synology NAS device owners (worldwide)The source does not say how they got in.The Hacker News
Medium27 Oct 2026
Warp
Sector not stated · Records not stated
Agent decision logs and telemetry data belonging to Warp agentic development environment users were exposed in an attack on a third-party vendor in the project's infrastructure.
27 Oct 2026
Medium27 Oct 2026
Energy giant ENGIE
Technology · Records not stated
French energy giant ENGIE, one of the world's largest power and natural gas providers, confirmed that attackers stole customer data after breaching a marketing platform used by business partners.
27 Oct 2026
High27 Oct 2026
TeamUpdraft
Technology · Records not stated
Attackers used exposed UpdraftCentral credentials to install malicious plugins and gain persistent access to connected WordPress sites.
27 Oct 2026
Medium27 Oct 2026
AfD
Government · 345,439 records
345,439 records exposed, Email addresses, Email messages
27 Oct 2026
Medium26 Oct 2026
The University of Copenhagen in Denmark
Education · 525,000 records
The University of Copenhagen in Denmark confirmed that hackers accessed one of its test environments containing personal data belonging to 525,000 people.
26 Oct 2026
High26 Oct 2026
Popular AI tool LiteLLM
Sector not stated · Records not stated
LiteLLM, an open-source tool widely used by artificial intelligence developers, said a key accidentally exposed in May was behind a supply-chain attack that is believed to have hit tens of thousands of users last week.
26 Oct 2026
Medium24 Oct 2026
TeamUpdraft (UpdraftCentral)
Technology · Records not stated
Exposed UpdraftCentral credentials were used by attackers to install malicious plugins and establish persistent access on connected WordPress sites.
24 Oct 2026
High24 Oct 2026
Crime Stoppers (Canada)
Sector not stated · Records not stated
Data hack described by CBC as potentially one of the most harmful data breaches in Canada; extent revealed in an exclusive investigation.
24 Oct 2026
High23 Oct 2026
Quest Diagnostics
Healthcare · Records not stated
American clinical laboratory company Quest Diagnostics disclosed that patient records have been exposed after a threat actor gained unauthorized access to its Quanum LSM system.
23 Oct 2026
Critical23 Oct 2026
Quest Diagnostics
Healthcare · Records not stated
Nationwide lab test company Quest Diagnostics said one of its key systems may have experienced a breach of patient data.
23 Oct 2026
Critical22 Oct 2026
Capcom
Sector not stated · 11,700,000 records
Japanese gaming giant Capcom has confirmed that hackers breached its membership service, CAPCOM ID, exposing more than 11.7 million customer email addresses and associated information.
22 Oct 2026
Medium22 Oct 2026
LiteLLM release pipeline
Sector not stated · Records not stated
Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables.
22 Oct 2026
Medium22 Oct 2026
ThreatsDay
Sector not stated · Records not stated
This week has already been rough for cybersecurity. Critical PHP and GitLab RCE flaws, serious Linux security bugs, compromised eMudhra certificates, a Node.js RCE flaw, a hacked LiteLLM release, and hundreds of…
22 Oct 2026
Medium22 Oct 2026
LiteLLM release pipeline
Technology · Records not stated
Hackers hijacked the software release pipeline of LiteLLM, a popular open-source AI gateway, to distribute credential-stealing malware, marking the project’s second supply chain compromise this year despite security…
22 Oct 2026
Medium21 Oct 2026
Japan's Onamae Desktop Cloud
Technology · 26,739 records
Hackers compromised the infrastructure of Onamae Desktop Cloud, a popular provider of VPS services in Japan, and installed malware on up to 26,739 customers' servers.
21 Oct 2026
Medium20 Oct 2026
PHP
Sector not stated · Records not stated
The PHP security team is warning administrators to prepare for emergency security updates tomorrow to address two critical vulnerabilities, as information about the flaws has reportedly leaked ahead of their scheduled…
20 Oct 2026
High20 Oct 2026
Organisation not named
Healthcare · 5,461 records
The disclosure as indexed does not name the organisation.
Data breach affected 5,461 patients, exposing sensitive health information.
20 Oct 2026
Medium20 Oct 2026
California
Government · Records not stated
The CDE released multiple statements over the last week warning the state’s students that assessment contractor Educational Testing Service (ETS) suffered a months-long data breach.
20 Oct 2026
Medium20 Oct 2026
Ahold Delhaize
Retail · Records not stated
Ahold Delhaize, one of the world's largest food retail chains, confirmed that last week's cyberattack disrupted services at stores across Europe and the United States.
20 Oct 2026
Medium20 Oct 2026
Assurance Retraite
Government · 70,372 records
70,372 records exposed, Dates of birth, Email addresses, Family members' names, Government issued IDs and 5 more
20 Oct 2026
Critical19 Oct 2026
Nikkei
Sector not stated · 1,800,000 records
Nikkei Inc. disclosed a new data breach, the third in about a month, that exposed 1.83 million personal information records.
19 Oct 2026
Medium19 Oct 2026
OpenCode hack
Technology · Records not stated
The open-source AI coding project OpenCode has notified a small number of users that API keys they used with external providers were exposed in a security breach.
19 Oct 2026
Medium19 Oct 2026
ConnectWise backup credentials
Finance · Records not stated
ConnectWise has disabled key cloud services and is investigating unauthorized access to customers’ Microsoft 365 environments after a credential tied to its Cloud Backup platform was compromised and used to…
19 Oct 2026
Medium19 Oct 2026
Ahold Delhaize
Sector not stated · Records not stated
Ahold Delhaize, the Dutch multinational grocery retailer, said Monday that a cyberattack forced it to take systems offline across most of its U.S. and European brands, impacting shoppers on both sides of the Atlantic.
19 Oct 2026
Were you affected?