Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,345
Disclosures in the tracker, all years
2,058
Of those, indexed in 2026
119
Added in October
16
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 26 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
74 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United States23 Oct 2026Ford Audio-Video Systems, LLCThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026Industrial and healthcare organizationsHow they got in: a known flaw in software the victim ran.The Hacker News
- United States23 Oct 2026EyeMed Vision Care, LLCThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026Alabama Fire CollegeThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026UltraMobile ImagingThe source does not say how they got in.HIPAA Journal
- United States23 Oct 2026Washington GastroenterologyThe source does not say how they got in.HIPAA Journal
- United States23 Oct 2026Tarter Krinsky & DroginThe source does not say how they got in.HIPAA Journal
- United States23 Oct 2026Quest DiagnosticsThe source does not say how they got in.SecurityWeek
- United States22 Oct 2026Dill Dill Carr Stonbraker & Hutchings, P.C.The source does not say how they got in.California Attorney General
- United States22 Oct 2026BASS Medical GroupThe source does not say how they got in.California Attorney General
- United States22 Oct 2026Summit School DistrictThe source does not say how they got in.Vermont Attorney General
- United States22 Oct 2026Nordace Limited d/b/a NordaceThe source does not say how they got in.Vermont Attorney General
Critical1 Apr 2026
Organisation not named
Technology · 165,000,000 records
The disclosure as indexed does not name the organisation.
165 organizations breached via Snowflake platform by ShinyHunters through compromised Anodot access
1 Apr 2026
High1 Apr 2026
Ernst & Young
Legal · Records not stated
Third-party IT service management platform breached; client tax data exposed March 28 - April 12, 2026
1 Apr 2026
Medium1 Apr 2026
T-Mobile
Technology · Records not stated
Insider data breach incident with limited impact
1 Apr 2026
High1 Apr 2026
Heart South Cardiovascular Group
Healthcare · 46,666 records
Data breach affected 46,666 patients, exposing personal and health records
1 Apr 2026
High1 Apr 2026
CISA (US Government)
Government · Records not stated
US agency breached through Cisco vulnerability; FIRESTARTER backdoor allowed access through March
1 Apr 2026
Critical1 Apr 2026
Marquis Software Solutions
Finance · Records not stated
Ransomware attack exposed 788,000 financial records including names, addresses and card numbers
1 Apr 2026
High1 Apr 2026
CISA/US Government Agency
Government · Records not stated
Unnamed U.S. department breached through Cisco vulnerability; FIRESTARTER backdoor provided persistent access through March 2026
1 Apr 2026
Critical1 Apr 2026
CISA (US Agency)
Government · Records not stated
Unnamed US department breached via Cisco vulnerability, FIRESTARTER backdoor allowed persistent access
1 Apr 2026
High1 Apr 2026
Sandhills Medical Foundation
Healthcare · 170,000 records
Ransomware breach affecting 170,000 individuals in South Carolina
1 Apr 2026
High1 Apr 2026
Tribeca Film Festival
Sector not stated · 666,000 records
666,000 records including celebrity contact data exposed from unprotected database without password or encryption
1 Apr 2026
Critical1 Apr 2026
ANTS (France)
Government · 19,000,000 records
Cyberattack on French identity agency exposed 19 million records with personal data
1 Apr 2026
High1 Apr 2026
Cherry Creek School District
Education · Records not stated
Student data breach resulted in lawsuit against school district
1 Apr 2026
Critical1 Apr 2026
US Government Agency (CISA)
Government · Records not stated
Unnamed US agency breached through Cisco vulnerability; FIRESTARTER backdoor allowed access through March 2026
1 Apr 2026
Critical1 Apr 2026
Unnamed U.S. Department (CISA)
Government · Records not stated
Breached through Cisco vulnerability; FIRESTARTER backdoor allowed unauthorized access through March
1 Apr 2026
High1 Apr 2026
Huntsville Hospital Health System
Healthcare · Records not stated
Third-party data breach compromised patient information
1 Apr 2026
High1 Apr 2026
FirstClass
Retail · Records not stated
Australian travel agency customer records compromised; threat actor claimed data on underground hacking forums
1 Apr 2026
Critical1 Apr 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
ShinyHunters breached Rockstar Games via Snowflake; 165 organizations affected in supply chain attack
1 Apr 2026
Critical1 Apr 2026
Rockstar Games
Technology · Records not stated
Breach through compromised Anodot Snowflake access by ShinyHunters group; 165 organizations affected in cascading attack.
1 Apr 2026
Critical1 Apr 2026
CISA (US Cybersecurity Agency)
Government · Records not stated
Breached through Cisco vulnerability; FIRESTARTER backdoor allowed persistent access through March
1 Apr 2026
Critical1 Apr 2026
ANTS (French ID Agency)
Government · 19,000,000 records
Cyberattack exposed 19 million records linked to personal identity data
1 Apr 2026
High1 Apr 2026
Mexican Government Agencies
Government · Records not stated
Single hacker compromised 9 government agencies using Claude Code and OpenAI tools
1 Apr 2026
High1 Apr 2026
U.S. Government Agency (CISA)
Government · Records not stated
Unnamed federal agency breached via Cisco vulnerability; FIRESTARTER backdoor maintained access through March
1 Apr 2026
High1 Apr 2026
Legend Senior Care
Healthcare · Records not stated
Senior care provider affected by ransomware attack exposing patient data
1 Apr 2026
High1 Apr 2026
Windward Life Care
Healthcare · Records not stated
Senior care provider affected by ransomware attack exposing patient data
1 Apr 2026
Were you affected?