Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,345
Disclosures in the tracker, all years
2,058
Of those, indexed in 2026
119
Added in October
11
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 27 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
74 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United States23 Oct 2026Ford Audio-Video Systems, LLCThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026Industrial and healthcare organizationsHow they got in: a known flaw in software the victim ran.The Hacker News
- United States23 Oct 2026EyeMed Vision Care, LLCThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026Alabama Fire CollegeThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026UltraMobile ImagingThe source does not say how they got in.HIPAA Journal
- United States23 Oct 2026Washington GastroenterologyThe source does not say how they got in.HIPAA Journal
- United States23 Oct 2026Tarter Krinsky & DroginThe source does not say how they got in.HIPAA Journal
- United States23 Oct 2026Quest DiagnosticsThe source does not say how they got in.SecurityWeek
- United States22 Oct 2026Dill Dill Carr Stonbraker & Hutchings, P.C.The source does not say how they got in.California Attorney General
- United States22 Oct 2026BASS Medical GroupThe source does not say how they got in.California Attorney General
- United States22 Oct 2026Summit School DistrictThe source does not say how they got in.Vermont Attorney General
- United States22 Oct 2026Nordace Limited d/b/a NordaceThe source does not say how they got in.Vermont Attorney General
High1 Mar 2026
Ernst & Young (EY)
Sector not stated · Records not stated
Third-party IT support platform compromise in March and April 2026 exposed sensitive client information.
1 Mar 2026
High1 Mar 2026
Ernst & Young (EY)
Sector not stated · Records not stated
Compromise of a third-party IT support platform exposed sensitive client information.
1 Mar 2026
High1 Mar 2026
Ernst & Young (EY)
Sector not stated · Records not stated
Compromise of a third-party IT support platform in March and April 2026 exposed sensitive client information.
1 Mar 2026
High1 Mar 2026
Ernst & Young (EY)
Sector not stated · Records not stated
Compromise of a third-party IT support platform in March and April 2026 exposed sensitive client information at EY, one of the largest professional services firms.
1 Mar 2026
High1 Mar 2026
Ernst & Young
Legal · Records not stated
Third-party IT support platform compromise exposed sensitive client information in March-April 2026
1 Mar 2026
Critical1 Mar 2026
UK BioBank
Healthcare · Records not stated
Confidential health records from medical research project leaked online multiple times
1 Mar 2026
High1 Mar 2026
CareCloud
Healthcare · Records not stated
Electronic health records of patients leaked after unauthorized system access
1 Mar 2026
Critical1 Mar 2026
UK BioBank
Healthcare · Records not stated
Confidential health records from flagship medical research project leaked and exposed online multiple times
1 Mar 2026
Critical1 Mar 2026
UK BioBank
Healthcare · Records not stated
Confidential health records from medical research project exposed online, leaked dozens of times
1 Mar 2026
Critical1 Mar 2026
Trizetto Provider Solutions
Healthcare · 3,400,000 records
Unauthorized IT environment access exposing PHI of 3.4 million individuals
1 Mar 2026
High1 Mar 2026
Foster City (government)
Government · Records not stated
Ransomware attack forced city computer systems offline
1 Mar 2026
High1 Mar 2026
Foster City
Government · Records not stated
Ransomware attack forced city computer systems offline
1 Mar 2026
High1 Mar 2026
Berlin Government
Government · Records not stated
Rhysida ransomware attack with claimed data theft before elections
1 Mar 2026
High1 Mar 2026
Foster City
Government · Records not stated
Ransomware attack on city computer network forcing system offline
1 Mar 2026
Critical1 Mar 2026
CareCloud
Healthcare · Records not stated
Healthcare software firm informed SEC of potential patient data leak after hackers accessed electronic health records systems
1 Mar 2026
Critical1 Mar 2026
Intesa Sanpaolo S.p.A.
Finance · Records not stated
Employee unlawfully accessed customer data over 2+ years; €31.8M regulatory fine
1 Mar 2026
High1 Mar 2026
Companies House
Government · Records not stated
Security issue in WebFiling service exposed company data during five-month period
1 Mar 2026
High1 Mar 2026
Foster City
Government · Records not stated
Ransomware attack forced city computer system offline for days
1 Mar 2026
High1 Mar 2026
Foster City Government
Government · Records not stated
Ransomware attack forced city computer systems offline; declared state of emergency
1 Mar 2026
High1 Mar 2026
Hasbro
Retail · Records not stated
Corporate network breach exposed employee personal and financial data
1 Mar 2026
High1 Mar 2026
Foster City
Government · Records not stated
Ransomware attack on city computer network forced systems offline
1 Mar 2026
High1 Mar 2026
Foster City
Government · Records not stated
Ransomware attack on city computer system forced offline for days, emergency declared
1 Mar 2026
Critical1 Mar 2026
GuardDog Telehealth
Healthcare · Records not stated
Telehealth company illegally accessed patients' medical records under guise of treatment and sold to law firms
1 Mar 2026
Critical1 Mar 2026
Intesa Sanpaolo S.p.A.
Finance · Records not stated
Employee unlawfully accessed customer data over two years, serious data protection failures
1 Mar 2026
Were you affected?