Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,345
Disclosures in the tracker, all years
2,058
Of those, indexed in 2026
119
Added in October
16
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 26 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
74 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United States23 Oct 2026Ford Audio-Video Systems, LLCThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026Industrial and healthcare organizationsHow they got in: a known flaw in software the victim ran.The Hacker News
- United States23 Oct 2026EyeMed Vision Care, LLCThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026Alabama Fire CollegeThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026UltraMobile ImagingThe source does not say how they got in.HIPAA Journal
- United States23 Oct 2026Washington GastroenterologyThe source does not say how they got in.HIPAA Journal
- United States23 Oct 2026Tarter Krinsky & DroginThe source does not say how they got in.HIPAA Journal
- United States23 Oct 2026Quest DiagnosticsThe source does not say how they got in.SecurityWeek
- United States22 Oct 2026Dill Dill Carr Stonbraker & Hutchings, P.C.The source does not say how they got in.California Attorney General
- United States22 Oct 2026BASS Medical GroupThe source does not say how they got in.California Attorney General
- United States22 Oct 2026Summit School DistrictThe source does not say how they got in.Vermont Attorney General
- United States22 Oct 2026Nordace Limited d/b/a NordaceThe source does not say how they got in.Vermont Attorney General
High1 Apr 2026
Adams County
Government · Records not stated
Ransomware attack crippled county servers, week-long restoration
1 Apr 2026
High1 Apr 2026
Laurel Eye Clinic
Healthcare · Records not stated
Security incident exposed patient data in ransomware attack
1 Apr 2026
Critical1 Apr 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
24 billion exposed records including usernames, passwords, URLs from infostealer malware
1 Apr 2026
High1 Apr 2026
Adams County Government
Government · Records not stated
Ransomware attack disabled county systems for over a week; $250K restoration
1 Apr 2026
Critical1 Apr 2026
Organisation not named
Technology · 165,000,000 records
The disclosure as indexed does not name the organisation.
165 organizations breached via compromised Snowflake credentials; ShinyHunters exploited Anodot access
1 Apr 2026
High1 Apr 2026
Bol (Dutch retailer)
Retail · Records not stated
Third-party logistics partner breach affecting online retailer operations
1 Apr 2026
High1 Apr 2026
Valley Kidney Specialists
Healthcare · Records not stated
Data breach compromised personal and health information of patients
1 Apr 2026
Critical1 Apr 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
US agency breached through Cisco vulnerability; FIRESTARTER backdoor allowed access through March
1 Apr 2026
Critical1 Apr 2026
Department for Education
Government · 607,000 records
Cyberattack exposed approximately 607,000 records
1 Apr 2026
High1 Apr 2026
bol.com
Retail · Records not stated
Third-party logistics partner hacked, affecting online retailer's operations and customer data
1 Apr 2026
Critical1 Apr 2026
France ANTS
Government · 19,000,000 records
Major cyberattack on national identity agency exposed 19 million records with personal data
1 Apr 2026
Critical1 Apr 2026
UK BioBank
Healthcare · Records not stated
Confidential health records from 500k Britons exposed and offered for sale on Chinese website
1 Apr 2026
High1 Apr 2026
Allstate
Finance · Records not stated
Breach exposed employee-related records, part of pattern targeting insurers
1 Apr 2026
High1 Apr 2026
Data breach
Healthcare · Records not stated
Data breach exposed SSNs and medical records of patients
1 Apr 2026
High1 Apr 2026
SplitVPN
Technology · 865,000 records
Data breach exposed personal records of approximately 865,000 users (Russian VPN provider)
1 Apr 2026
Critical1 Apr 2026
Marquis (fintech)
Finance · 672,000 records
2025 ransomware attack stole 672,000 records including names, addresses and card numbers
1 Apr 2026
High1 Apr 2026
U.S. Federal Agency (CISA)
Government · Records not stated
Unnamed U.S. department breached through Cisco vulnerability; FIRESTARTER backdoor allowed persistent access through March 2026
1 Apr 2026
Critical1 Apr 2026
Fortinet FortiGate
Technology · Records not stated
73,932 FortiGate firewall systems exposed with valid administrative and VPN credentials
1 Apr 2026
High1 Apr 2026
River Financial Corporation
Finance · Records not stated
Ransomware attack with data stolen; hackers confirmed data deletion
1 Apr 2026
High1 Apr 2026
Żabka Polska
Retail · Records not stated
Data breach exposing 541,000 Jira issues and customer data from major Polish retailer
1 Apr 2026
High1 Apr 2026
T-Mobile USA
Technology · Records not stated
Insider incident data breach with limited impact
1 Apr 2026
High1 Apr 2026
Ernst & Young (EY)
Legal · Records not stated
Third-party IT service breach exposed client tax data (March 28 - April 12, 2026)
1 Apr 2026
High1 Apr 2026
Fidelity Brokerage Services
Finance · Records not stated
Data breach resulting in $1.25M regulatory fine
1 Apr 2026
Critical1 Apr 2026
Paidwork
Technology · 22,000,000 records
22 million user records exposed including emails, passwords, and banking data
1 Apr 2026
Were you affected?