Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,325
Disclosures in the tracker, all years
2,040
Of those, indexed in 2026
97
Added in October
24
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 23 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
71 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United States23 Oct 2026Tarter Krinsky & DroginThe source does not say how they got in.HIPAA Journal
- United States23 Oct 2026Quest DiagnosticsThe source does not say how they got in.SecurityWeek
- United States22 Oct 2026Summit School DistrictThe source does not say how they got in.Vermont Attorney General
- United States22 Oct 2026Nordace Limited d/b/a NordaceThe source does not say how they got in.Vermont Attorney General
- United States22 Oct 2026Deposition Solutions, LLC (d/b/a Lexitas)The source does not say how they got in.California Attorney General
- United States22 Oct 2026Opportune LLPThe source does not say how they got in.California Attorney General
- United States22 Oct 2026Transformative Healthcare, LLCThe source does not say how they got in.HIPAA Journal
- United States22 Oct 2026American Renal Management LLCThe source does not say how they got in.HIPAA Journal
- United States22 Oct 2026Ridgeway Pharmacy LtdHow they got in: a supplier or vendor that was compromised first.HIPAA Journal
- United States22 Oct 2026City of Columbia, South CarolinaThe source does not say how they got in.The Record
- United States22 Oct 2026RailwayThe source does not say how they got in.TechCrunch
- United States21 Oct 2026Critical infrastructure organizations worldwideHow they got in: stolen or reused passwords.BleepingComputer
Critical1 Jul 2026
Craneware
Healthcare · Records not stated
Hospital software vendor breach exposing customer healthcare data through supply-chain attack
1 Jul 2026
High1 Jul 2026
Abbott Laboratories
Healthcare · Records not stated
Cyber incident investigated; medical device company disclosed data breach affecting patients
1 Jul 2026
Critical1 Jul 2026
Amgen
Healthcare · Records not stated
Patient health data and intellectual property stolen after hackers accessed cloud environment
1 Jul 2026
Critical1 Jul 2026
Origin Energy
Sector not stated · 2,000,000 records
2 million customer records stolen in hacking incident
1 Jul 2026
High1 Jul 2026
LastPass
Technology · Records not stated
Data breach at third-party vendor exposed customer data
1 Jul 2026
Critical1 Jul 2026
Network intrusion
Government · Records not stated
Network intrusion confirmed on Homeland Security Information Network
1 Jul 2026
High1 Jul 2026
Hugging Face
Technology · Records not stated
Breach affected internal datasets and credentials, users urged to rotate tokens
1 Jul 2026
Critical1 Jul 2026
Accenture
Technology · Records not stated
Data breach involving 35GB of internal data including source code and credentials
1 Jul 2026
High1 Jul 2026
Coca-Cola (Fairlife)
Retail · Records not stated
Ransomware attack shut down dairy operations, disclosed to SEC
1 Jul 2026
High1 Jul 2026
Fairlife
Retail · Records not stated
Ransomware attack on Coca-Cola's dairy unit affected production-related systems
1 Jul 2026
High1 Jul 2026
River Bank & Trust
Finance · Records not stated
Ransomware attack resulted in data theft; hackers confirmed deletion of stolen data
1 Jul 2026
High1 Jul 2026
Chick-fil-A
Retail · Records not stated
Hackers accessed customer loyalty accounts using stolen usernames and passwords
1 Jul 2026
High1 Jul 2026
Clover Health
Healthcare · Records not stated
Health insurer disclosed data breach; data type and victim count not yet determined
1 Jul 2026
High1 Jul 2026
Craneware
Healthcare · Records not stated
Hospital software vendor breach exposed healthcare customer data through supply-chain attack
1 Jul 2026
High1 Jul 2026
River Financial Corporation
Finance · Records not stated
Ransomware attack; hackers deleted stolen data after ransom demand; confirmed data deletion
1 Jul 2026
Critical1 Jul 2026
Instructure (Canvas platform)
Education · Records not stated
Supply chain breach generating majority of 2026 breach notices
1 Jul 2026
High1 Jul 2026
Ransomware attack disrupted systems operations
Sector not stated · Records not stated
Ransomware attack disrupted systems operations
1 Jul 2026
Critical1 Jul 2026
Comcast Xfinity
Technology · 35,000,000 records
Cyberattack exposes personal information of Xfinity customers; $117.5M settlement reached
1 Jul 2026
High1 Jul 2026
LVM (Latvian State Forestry)
Sector not stated · Records not stated
Ransomware attack, systems still being restored weeks after incident
1 Jul 2026
High1 Jul 2026
DHS (Homeland Security)
Government · Records not stated
Network intrusion on Homeland Security Information Network supporting World Cup operations confirmed
1 Jul 2026
High1 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Network intrusion on Homeland Security Information Network supporting World Cup infrastructure
1 Jul 2026
High1 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack attributed to foreign financially motivated threat group
1 Jul 2026
High1 Jul 2026
LVM (Latvian Forestry)
Sector not stated · Records not stated
Ransomware attack by foreign financially motivated group disrupted forestry operations
1 Jul 2026
High1 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack attributed to foreign financially motivated group; systems restoration ongoing
1 Jul 2026
Were you affected?