Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,345
Disclosures in the tracker, all years
2,058
Of those, indexed in 2026
119
Added in October
16
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 26 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
74 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United States23 Oct 2026Ford Audio-Video Systems, LLCThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026Industrial and healthcare organizationsHow they got in: a known flaw in software the victim ran.The Hacker News
- United States23 Oct 2026EyeMed Vision Care, LLCThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026Alabama Fire CollegeThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026UltraMobile ImagingThe source does not say how they got in.HIPAA Journal
- United States23 Oct 2026Washington GastroenterologyThe source does not say how they got in.HIPAA Journal
- United States23 Oct 2026Tarter Krinsky & DroginThe source does not say how they got in.HIPAA Journal
- United States23 Oct 2026Quest DiagnosticsThe source does not say how they got in.SecurityWeek
- United States22 Oct 2026Dill Dill Carr Stonbraker & Hutchings, P.C.The source does not say how they got in.California Attorney General
- United States22 Oct 2026BASS Medical GroupThe source does not say how they got in.California Attorney General
- United States22 Oct 2026Summit School DistrictThe source does not say how they got in.Vermont Attorney General
- United States22 Oct 2026Nordace Limited d/b/a NordaceThe source does not say how they got in.Vermont Attorney General
High1 Apr 2026
Heart South Cardiovascular Group
Healthcare · 46,666 records
46,666 patients affected with personal and health records exposed
1 Apr 2026
Critical1 Apr 2026
ANTS (France)
Government · 19,000,000 records
19M records from national identity agency exposed in cyberattack
1 Apr 2026
Critical1 Apr 2026
Medtronic
Healthcare · 9,000,000 records
Data hack exposed over 9 million client records according to customer class action filing
1 Apr 2026
High1 Apr 2026
Ryanair
Sector not stated · Records not stated
Court documents, flight data, and banking details exposed; data claimed on hacker forum
1 Apr 2026
Critical1 Apr 2026
U.S. Department (CISA)
Government · Records not stated
Unnamed federal agency breached via Cisco vulnerability; FIRESTARTER backdoor allowed access through March
1 Apr 2026
Critical1 Apr 2026
ANTS (French ID Agency)
Government · 19,000,000 records
Major cyberattack exposed 19 million records including personal data linked to French identity system
1 Apr 2026
Critical1 Apr 2026
Intesa Sanpaolo SpA
Finance · Records not stated
Employee unlawfully accessed customer data over two years; Italian regulator fined $36 million for data protection failures
1 Apr 2026
High1 Apr 2026
Nissan
Technology · Records not stated
Hacking group breached file-transfer system of third-party vendor used by Nissan and Infiniti
1 Apr 2026
Critical1 Apr 2026
UK Biobank
Healthcare · Records not stated
Health records of 500,000 Britons offered for sale on Chinese website (Alibaba)
1 Apr 2026
Critical1 Apr 2026
UK Biobank
Healthcare · Records not stated
Private health records of 500,000+ Britons offered for sale on Chinese website
1 Apr 2026
High1 Apr 2026
Cognizant
Technology · Records not stated
Data breach on April 21, 2026 exposing personal information of customers
1 Apr 2026
High1 Apr 2026
Cognizant
Technology · Records not stated
Data breach occurring April 21, 2026 affecting customers with personal information exposed
1 Apr 2026
High1 Apr 2026
Cognizant
Technology · Records not stated
Data breach on April 21, 2026; personal information exposed; company offers $1 million identity theft cover
1 Apr 2026
Critical1 Apr 2026
Intesa Sanpaolo S.p.A.
Finance · Records not stated
Employee unlawfully accessed customer data over two years; insider threat breach
1 Apr 2026
High1 Apr 2026
Nissan
Sector not stated · Records not stated
Data breach involving information held by third-party vendor; hacking group claimed breach
1 Apr 2026
High1 Apr 2026
Ryanair
Sector not stated · Records not stated
Breach claimed on hacker forums, exposing legal emails, flight data, and banking details
1 Apr 2026
Critical1 Apr 2026
CISA (US Agency)
Government · Records not stated
Breached through Cisco vulnerability, FIRESTARTER backdoor allowed access through March
1 Apr 2026
Critical1 Apr 2026
ANTS
Government · Records not stated
Major cyberattack on France's identity agency exposed 19 million personal records
1 Apr 2026
High1 Apr 2026
Vercel
Technology · Records not stated
OAuth supply chain compromise exposed trusted third-party apps and platform environment variables
1 Apr 2026
High1 Apr 2026
Sandhills Medical Foundation
Healthcare · 170,000 records
170,000 individuals affected in ransomware breach of South Carolina healthcare provider
1 Apr 2026
Critical1 Apr 2026
ANTS (French ID Agency)
Government · 19,000,000 records
Cyberattack exposed 19 million records containing personal data linked to national identity
1 Apr 2026
High1 Apr 2026
ADT
Sector not stated · 30,814 records
Cybercriminals breached systems and stole limited set of customer and prospective customer data
1 Apr 2026
Critical1 Apr 2026
Intesa Sanpaolo S.p.A.
Finance · Records not stated
Employee unlawfully accessed customer data over two years; €31.8m fine for breach transparency failure
1 Apr 2026
High1 Apr 2026
Ryanair
Sector not stated · Records not stated
Breach exposed legal emails, flight data, and banking details; data claimed on hacker forums
1 Apr 2026
Were you affected?