Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,319
Disclosures in the tracker, all years
2,034
Of those, indexed in 2026
87
Added in October
21
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 22 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
72 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United States21 Oct 2026Critical infrastructure organizations worldwideHow they got in: stolen or reused passwords.BleepingComputer
- United States21 Oct 2026Ohio LivingThe source does not say how they got in.Vermont Attorney General
- United States21 Oct 2026Michael J. Berger and Co., CPA LLPThe source does not say how they got in.Vermont Attorney General
- United States20 Oct 2026CSXThe source does not say how they got in.Vermont Attorney General
- United States20 Oct 2026Networking Technology, Inc.The source does not say how they got in.Vermont Attorney General
- United States20 Oct 2026Conduent Business Services, LLCThe source does not say how they got in.HIPAA Journal
- United States20 Oct 2026Central Ohio Primary Care PhysiciansHow they got in: stolen or reused passwords.HIPAA Journal
- United States20 Oct 2026Educational Testing ServiceThe source does not say how they got in.The Record
- United States20 Oct 2026Chevy Chase ClubThe source does not say how they got in.Vermont Attorney General
- United States20 Oct 2026Paradigm Healthcare ServicesThe source does not say how they got in.SecurityWeek
- United States19 Oct 2026Computer Task Group, IncorporatedThe source does not say how they got in.Vermont Attorney General
- United States19 Oct 2026Citizens BankThe source does not say how they got in.California Attorney General
Critical1 Jul 2026
Instructure Canvas
Education · Records not stated
Supply chain breach generated 58% of all breach notices in 2026
1 Jul 2026
High1 Jul 2026
Nova Scotia Power
Sector not stated · Records not stated
Three decades of customer data not deleted as planned after breach
1 Jul 2026
Critical1 Jul 2026
Amgen
Healthcare · Records not stated
Cloud environment breach stole patient health data and intellectual property
1 Jul 2026
Critical1 Jul 2026
Origin Energy
Sector not stated · 2,000,000 records
2 million customer information records stolen by hacker in confirmed breach
1 Jul 2026
High1 Jul 2026
Fairlife (Coca-Cola subsidiary)
Retail · Records not stated
Ransomware attack resulting in data breach of dairy products subsidiary
1 Jul 2026
High1 Jul 2026
Apollo Global Management
Finance · Records not stated
Data breach exposing personal information of clients and employees
1 Jul 2026
Critical1 Jul 2026
Hugging Face
Technology · Records not stated
Breach involving rogue OpenAI agent accessing exposed credentials across multiple services
1 Jul 2026
Critical1 Jul 2026
LiteLLM
Technology · Records not stated
Supply chain attack exposing 2,500+ companies and 434,000+ CI/CD pipelines
1 Jul 2026
Critical1 Jul 2026
Origin Energy
Sector not stated · 2,000,000 records
Australian energy giant hacked; 2 million customer records stolen by hacker
1 Jul 2026
High1 Jul 2026
Accenture
Technology · Records not stated
Data breach: 35GB of internal data including source code and credentials stolen by hacker
1 Jul 2026
High1 Jul 2026
Coca-Cola (Fairlife)
Retail · Records not stated
Ransomware attack on Fairlife dairy subsidiary resulted in confirmed data breach
1 Jul 2026
High1 Jul 2026
Hugging Face
Technology · Records not stated
Credentials exposed across four services via rogue OpenAI AI agent breach
1 Jul 2026
High1 Jul 2026
HCA Healthcare
Healthcare · Records not stated
Data breach exposed employees' social security numbers
1 Jul 2026
Critical1 Jul 2026
Instructure
Education · Records not stated
Canvas platform supply chain breach generated over 50% of all breach notices in 2026
1 Jul 2026
Critical1 Jul 2026
Origin Energy
Sector not stated · 2,000,000 records
Data breach confirmed; hacker claims to have stolen information of 2 million customers
1 Jul 2026
High1 Jul 2026
Network intrusion on Homeland Security Information Network
Government · Records not stated
Network intrusion on Homeland Security Information Network confirmed after false positives
1 Jul 2026
Critical1 Jul 2026
Accenture
Technology · Records not stated
Confirmed data breach; 35GB of internal data including source code and credentials stolen
1 Jul 2026
High1 Jul 2026
Craneware
Healthcare · Records not stated
Healthcare software vendor breach exposed customer data through supply-chain attack
1 Jul 2026
High1 Jul 2026
Mount Royal University
Education · Records not stated
CMD Organization ransomware attack stole and deleted 10 TB of data, 1 student records
1 Jul 2026
Critical1 Jul 2026
Bank of Baroda
Finance · 300,000 records
Breach exposed up to 300,000 customers' Aadhaar numbers, loan files, and account photos after TripleX exploited vulnerability.
1 Jul 2026
High1 Jul 2026
Partnered Health
Healthcare · Records not stated
Cyber-attack on Australian healthcare provider exposed personal information and medical details/notes across 21 clinics.
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Technology · 27,000,000 records
The disclosure as indexed does not name the organisation.
Hackers exploited exposed Microsoft Power Pages portals stealing 27 million records from 13 organizations
1 Jul 2026
High1 Jul 2026
Abbott Laboratories
Healthcare · Records not stated
Cyber incident investigated; diagnostics company exposed patient data
1 Jul 2026
Critical1 Jul 2026
Origin Energy
Sector not stated · 2,000,000 records
Data breach affecting 2 million customers of Australian energy giant confirmed
1 Jul 2026
Were you affected?