Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,345
Disclosures in the tracker, all years
2,058
Of those, indexed in 2026
119
Added in October
11
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 27 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
74 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United States23 Oct 2026Ford Audio-Video Systems, LLCThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026Industrial and healthcare organizationsHow they got in: a known flaw in software the victim ran.The Hacker News
- United States23 Oct 2026EyeMed Vision Care, LLCThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026Alabama Fire CollegeThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026UltraMobile ImagingThe source does not say how they got in.HIPAA Journal
- United States23 Oct 2026Washington GastroenterologyThe source does not say how they got in.HIPAA Journal
- United States23 Oct 2026Tarter Krinsky & DroginThe source does not say how they got in.HIPAA Journal
- United States23 Oct 2026Quest DiagnosticsThe source does not say how they got in.SecurityWeek
- United States22 Oct 2026Dill Dill Carr Stonbraker & Hutchings, P.C.The source does not say how they got in.California Attorney General
- United States22 Oct 2026BASS Medical GroupThe source does not say how they got in.California Attorney General
- United States22 Oct 2026Summit School DistrictThe source does not say how they got in.Vermont Attorney General
- United States22 Oct 2026Nordace Limited d/b/a NordaceThe source does not say how they got in.Vermont Attorney General
High1 Mar 2026
CareCloud
Healthcare · Records not stated
Electronic health records of patients leaked after hackers accessed healthcare software systems
1 Mar 2026
Critical1 Mar 2026
LexisNexis
Legal · 400,000 records
400K users exposed including federal judges and .gov accounts via cloud system breach
1 Mar 2026
High1 Mar 2026
Lehigh Carbon Community College
Education · Records not stated
Data breach prompted school closure; extent of breach not fully disclosed
1 Mar 2026
High1 Mar 2026
CommonSpirit Health
Healthcare · 19,027 records
Healthcare consulting company data breach exposed 19,027 patient records and medical information
1 Mar 2026
High1 Mar 2026
DGFiP (French tax authority)
Government · 678,000 records
678,000 people and businesses affected, compromised credentials exposed tax and business info
1 Mar 2026
Critical1 Mar 2026
RingCentral
Technology · 1,600,000 records
1.6 million customer records exposed in data leak
1 Mar 2026
Critical1 Mar 2026
IDMerit
Technology · Records not stated
1 billion identity records exposed due to unprotected database
1 Mar 2026
Critical1 Mar 2026
TriZetto
Healthcare · 3,400,000 records
Year-long hack exposed records on 3.4 million people
1 Mar 2026
Critical1 Mar 2026
UK BioBank
Healthcare · Records not stated
Confidential health records from flagship medical research project exposed online multiple times
1 Mar 2026
Critical1 Mar 2026
UK BioBank
Healthcare · Records not stated
Confidential health records from medical research project exposed online
1 Mar 2026
Critical1 Mar 2026
UnitedHealthcare
Healthcare · Records not stated
One of the largest healthcare data breaches in American history involving multiple companies
1 Mar 2026
Critical1 Mar 2026
LiteLLM
Technology · Records not stated
Supply chain attack exposed over 430,000 CI/CD pipelines affecting over 2,500 organizations
1 Mar 2026
Critical1 Mar 2026
Conduent
Sector not stated · Records not stated
Breach compromised personal data of millions nationwide, notifications sent a year later
1 Mar 2026
Critical1 Mar 2026
Organisation not named
Healthcare · 1,200,000 records
The disclosure as indexed does not name the organisation.
Ransomware attack exposing personal data of 1.2 million individuals
1 Mar 2026
Critical1 Mar 2026
GuardDog
Healthcare · Records not stated
Telehealth company accessed and shared patient medical records from Epic platform with law firms without authorization
1 Mar 2026
Critical1 Mar 2026
CISA (US Agency)
Government · Records not stated
Breached through Cisco vulnerability, FIRESTARTER backdoor allowed persistent access through March
1 Mar 2026
Critical1 Mar 2026
Marquis
Finance · 672,000 records
Ransomware attack stole personal and financial data of over 672,000 people from fintech company
1 Mar 2026
High1 Mar 2026
Organisation not named
Education · Records not stated
The disclosure as indexed does not name the organisation.
Driver's license numbers and voter information from Multiethnic Cohort Study exposed in ransomware attack
1 Mar 2026
Critical1 Mar 2026
Fortinet FortiGate
Technology · Records not stated
73,932 FortiGate systems exposed with valid administrative and VPN credentials
1 Mar 2026
High1 Mar 2026
Multiethnic Cohort Study data
Education · Records not stated
Multiethnic Cohort Study data leaked following ransomware attack including driver's license numbers
1 Mar 2026
Critical1 Mar 2026
CISA (US Government)
Government · Records not stated
US agency breached through Cisco vulnerability, FIRESTARTER backdoor malware allowed persistent access through March
1 Mar 2026
High1 Mar 2026
Ransomware attack data
Education · Records not stated
Ransomware attack data leak from Multiethnic Cohort Study exposed driver's license numbers and voter registration data
1 Mar 2026
Critical1 Mar 2026
TriZetto (Year-long hack)
Healthcare · 3,400,000 records
Year-long network hack exposed records on 3.4 million people
1 Mar 2026
High1 Mar 2026
Foster City Government
Government · Records not stated
Ransomware attack forced city computer systems offline for days
1 Mar 2026
Were you affected?