Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,319
Disclosures in the tracker, all years
2,034
Of those, indexed in 2026
87
Added in October
21
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 22 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
72 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United States21 Oct 2026Critical infrastructure organizations worldwideHow they got in: stolen or reused passwords.BleepingComputer
- United States21 Oct 2026Ohio LivingThe source does not say how they got in.Vermont Attorney General
- United States21 Oct 2026Michael J. Berger and Co., CPA LLPThe source does not say how they got in.Vermont Attorney General
- United States20 Oct 2026CSXThe source does not say how they got in.Vermont Attorney General
- United States20 Oct 2026Networking Technology, Inc.The source does not say how they got in.Vermont Attorney General
- United States20 Oct 2026Conduent Business Services, LLCThe source does not say how they got in.HIPAA Journal
- United States20 Oct 2026Central Ohio Primary Care PhysiciansHow they got in: stolen or reused passwords.HIPAA Journal
- United States20 Oct 2026Educational Testing ServiceThe source does not say how they got in.The Record
- United States20 Oct 2026Chevy Chase ClubThe source does not say how they got in.Vermont Attorney General
- United States20 Oct 2026Paradigm Healthcare ServicesThe source does not say how they got in.SecurityWeek
- United States19 Oct 2026Computer Task Group, IncorporatedThe source does not say how they got in.Vermont Attorney General
- United States19 Oct 2026Citizens BankThe source does not say how they got in.California Attorney General
High1 Jul 2026
KT
Technology · Records not stated
Personal data breach and unauthorized micropayment damages caused by illegal base stations
1 Jul 2026
Critical1 Jul 2026
Suno
Technology · 55,000,000 records
Hackers stole names, phone numbers, and physical addresses of 55M users
1 Jul 2026
High1 Jul 2026
KT Corp
Technology · Records not stated
Rogue femtocell breach exposed 16,647 subscribers and stole SMS payment information
1 Jul 2026
Critical1 Jul 2026
Mount Royal University
Education · Records not stated
CMD Organization stole and deleted 10 TB in ransomware attack, demanded $1.9M ransom
1 Jul 2026
High1 Jul 2026
Partnered Health
Healthcare · Records not stated
Patient records stolen in cyberattack on Australian healthcare provider affecting 21 clinics
1 Jul 2026
High1 Jul 2026
Ernst & Young
Legal · Records not stated
Breach exposed client tax records and financial information
1 Jul 2026
High1 Jul 2026
Abbott Laboratories
Healthcare · Records not stated
Cyber incident under investigation affecting medical device company
1 Jul 2026
High1 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Network intrusion on Homeland Security Information Network confirmed after two false positives
1 Jul 2026
High1 Jul 2026
Hugging Face
Technology · Records not stated
Internal datasets and credentials exposed; users urged to rotate access tokens
1 Jul 2026
Critical1 Jul 2026
Accenture
Technology · Records not stated
35GB of internal data stolen including source code and credentials
1 Jul 2026
High1 Jul 2026
LVM (Latvian forestry company)
Sector not stated · Records not stated
State-owned forestry company still restoring systems weeks after ransomware attack
1 Jul 2026
High1 Jul 2026
Fairlife (Coca-Cola)
Retail · Records not stated
Ransomware attack on Coca-Cola's dairy unit affecting production-related systems; operations forced offline
1 Jul 2026
High1 Jul 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack with hackers claiming data deletion; financial institution impacted
1 Jul 2026
High1 Jul 2026
Clover Health
Healthcare · Records not stated
Insurer disclosed data breach; extent of data exposure and record count not yet determined
1 Jul 2026
Critical1 Jul 2026
Craneware
Healthcare · Records not stated
Hospital software vendor breach exposing customer healthcare data through supply-chain attack
1 Jul 2026
High1 Jul 2026
Abbott Laboratories
Healthcare · Records not stated
Cyber incident investigated; medical device company disclosed data breach affecting patients
1 Jul 2026
Critical1 Jul 2026
Amgen
Healthcare · Records not stated
Patient health data and intellectual property stolen after hackers accessed cloud environment
1 Jul 2026
Critical1 Jul 2026
Origin Energy
Sector not stated · 2,000,000 records
2 million customer records stolen in hacking incident
1 Jul 2026
High1 Jul 2026
LastPass
Technology · Records not stated
Data breach at third-party vendor exposed customer data
1 Jul 2026
Critical1 Jul 2026
Network intrusion
Government · Records not stated
Network intrusion confirmed on Homeland Security Information Network
1 Jul 2026
High1 Jul 2026
Hugging Face
Technology · Records not stated
Breach affected internal datasets and credentials, users urged to rotate tokens
1 Jul 2026
Critical1 Jul 2026
Accenture
Technology · Records not stated
Data breach involving 35GB of internal data including source code and credentials
1 Jul 2026
High1 Jul 2026
Coca-Cola (Fairlife)
Retail · Records not stated
Ransomware attack shut down dairy operations, disclosed to SEC
1 Jul 2026
High1 Jul 2026
Fairlife
Retail · Records not stated
Ransomware attack on Coca-Cola's dairy unit affected production-related systems
1 Jul 2026
Were you affected?