Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,352
Disclosures in the tracker, all years
2,066
Of those, indexed in 2026
125
Added in October
17
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 27 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
75 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United States26 Oct 2026Monmouth UniversityThe source does not say how they got in.Vermont Attorney General
- United States26 Oct 2026Denver Health Medical PlanThe source does not say how they got in.HIPAA Journal
- United States24 Oct 2026Brooklyn Counseling ServicesThe source does not say how they got in.Vermont Attorney General
- United States24 Oct 2026Northeastern Mental Health CenterThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026Industrial and healthcare organizationsHow they got in: a known flaw in software the victim ran.The Hacker News
- United States23 Oct 2026RL Schreiber, Inc.The source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026Ford Audio-Video Systems, LLCThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026EyeMed Vision Care, LLCThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026Alabama Fire CollegeThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026UltraMobile ImagingThe source does not say how they got in.HIPAA Journal
- United States23 Oct 2026Washington GastroenterologyThe source does not say how they got in.HIPAA Journal
- United States23 Oct 2026Tarter Krinsky & DroginThe source does not say how they got in.HIPAA Journal
Critical1 Feb 2026
Organisation not named
Education · Records not stated
The disclosure as indexed does not name the organisation.
Multiethnic Cohort Study data including driver's license numbers and voter registration leaked via ransomware
1 Feb 2026
Critical1 Feb 2026
Mexican Federal Government
Government · Records not stated
Nine agencies breached via AI platform exploits (Claude Code, ChatGPT); millions of records stolen
1 Feb 2026
Critical1 Feb 2026
Multiple (Credential Leak)
Technology · 149,000,000 records
149 million passwords exposed including 48 million Gmail accounts in massive credential database leak
1 Feb 2026
Critical1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack brought down computer network, canceling surgeries and closing clinics
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack brought down computer network, causing surgeries to be canceled and clinics closed
1 Feb 2026
High1 Feb 2026
FirstClass
Sector not stated · Records not stated
Australian travel agency customer records allegedly breached and posted on underground forums
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack shut down computer network; surgeries canceled and clinics closed
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack disabled computer network; surgeries canceled and clinics closed
1 Feb 2026
Critical1 Feb 2026
Mexican Government (9 agencies)
Government · Records not stated
Single hacker exploited Claude Code and OpenAI ChatGPT to breach 9 federal agencies Dec 2025-Feb 2026
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack on hospital network caused surgeries to be canceled and clinics closed
1 Feb 2026
High1 Feb 2026
Huntsville Hospital Health System
Healthcare · Records not stated
Patient data compromised through third-party breach affecting multiple facilities
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack disabled computer network, cancelled surgeries and closed clinics
1 Feb 2026
Critical1 Feb 2026
Exposed cloud database
Sector not stated · 3,000,000,000 records
Misconfigured database leaked 3 billion records including SSNs and plaintext passwords
1 Feb 2026
Critical1 Feb 2026
Unknown misconfigured database
Sector not stated · 3,000,000,000 records
3 billion records exposed including SSNs and plaintext passwords
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack disrupted network; surgeries canceled and clinics closed
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack brought down computer network, canceled surgeries and closed clinics
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack shut down computer network, cancelled surgeries and clinics
1 Feb 2026
High1 Feb 2026
KT Corporation
Technology · Records not stated
Customer data breach; South Korea fined telco $39 million for personal information exposure
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack on hospital network forced closure of clinics and cancellation of surgeries
1 Feb 2026
Medium1 Feb 2026
Malaysia Airlines
Sector not stated · Records not stated
Claimed by Qilin ransomware group on leak site, though no proof or data samples provided
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack brought down computer network; surgeries canceled, clinics closed
1 Feb 2026
High1 Feb 2026
FirstClass Travel
Sector not stated · Records not stated
Australian travel agency customer records allegedly compromised and posted on underground hacking forums
1 Feb 2026
Critical1 Feb 2026
Exposed database
Sector not stated · 3,000,000,000 records
Exposed database leaked 3 billion records including Social Security numbers and plaintext passwords
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack shut down computer network; surgeries canceled, clinics closed
1 Feb 2026
Were you affected?