Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,349
Disclosures in the tracker, all years
2,065
Of those, indexed in 2026
125
Added in October
17
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 27 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
75 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United States26 Oct 2026Monmouth UniversityThe source does not say how they got in.Vermont Attorney General
- United States26 Oct 2026Denver Health Medical PlanThe source does not say how they got in.HIPAA Journal
- United States24 Oct 2026Brooklyn Counseling ServicesThe source does not say how they got in.Vermont Attorney General
- United States24 Oct 2026Northeastern Mental Health CenterThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026Industrial and healthcare organizationsHow they got in: a known flaw in software the victim ran.The Hacker News
- United States23 Oct 2026RL Schreiber, Inc.The source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026Ford Audio-Video Systems, LLCThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026EyeMed Vision Care, LLCThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026Alabama Fire CollegeThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026UltraMobile ImagingThe source does not say how they got in.HIPAA Journal
- United States23 Oct 2026Washington GastroenterologyThe source does not say how they got in.HIPAA Journal
- United States23 Oct 2026Tarter Krinsky & DroginThe source does not say how they got in.HIPAA Journal
High1 Jan 2026
Xsolis
Healthcare · Records not stated
Healthcare AI vendor breach exposing patient records from clients
1 Jan 2026
Critical1 Jan 2026
Organisation not named
Technology · 24,000,000 records
The disclosure as indexed does not name the organisation.
Data breach exposed 24 million customer records; resulted in €42M fine for security vulnerabilities
1 Jan 2026
Critical1 Jan 2026
Armenian Government
Government · Records not stated
8 million government records allegedly offered for sale on hacker forum
1 Jan 2026
High1 Jan 2026
Xsolis
Healthcare · Records not stated
Healthcare AI vendor breach exposed patient records
1 Jan 2026
Critical1 Jan 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Inadvertent exposure of personal information of 700,000+ state residents
1 Jan 2026
Critical1 Jan 2026
Panera Bread
Retail · 14,000,000 records
ShinyHunters claimed 14M records exposed including names, emails, addresses, phone numbers, and account details
1 Jan 2026
Critical1 Jan 2026
Panera Bread
Retail · 14,000,000 records
14 million records exposed including names, emails, addresses, phone numbers
1 Jan 2026
High1 Jan 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Personal information of thousands of people leaked; agency delayed public notification for months
1 Jan 2026
Critical1 Jan 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Breach in October 2024 compromised 24+ million personal records including financial data; €42M fine
1 Jan 2026
High1 Jan 2026
Agency
Government · Records not stated
Agency leaked thousands of people's personal information but delayed public notification
1 Jan 2026
High1 Jan 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Exposed personal information of 700,000 state residents after inadvertent exposure
1 Jan 2026
Critical1 Jan 2026
Exposed sensitive data of 700,000 individuals online
Government · 700,000 records
Exposed sensitive data of 700,000 individuals online
1 Jan 2026
Critical1 Jan 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Inadvertent exposure of personal information belonging to 700,000 state residents
1 Jan 2026
Critical1 Jan 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Hackers offering to sell alleged 8 million government records on hacker forum
1 Jan 2026
High1 Jan 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Hackers breached facility supplying heat to ~50,000 residents via private APN
1 Jan 2026
High1 Jan 2026
CEVA Logistics
Retail · Records not stated
Cyberattack disrupted operations at eight European warehouses affecting retailers and Steam customers
1 Jan 2026
High1 Jan 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Heat-and-power facility breached via private APN, supplies 50,000 residents
1 Jan 2026
High1 Jan 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Thousands of people's personal information leaked; agency delayed public notification for months
1 Jan 2026
Critical1 Jan 2026
Puerto Rico Government Agency
Government · Records not stated
1 million social security numbers exposed via cybersecurity loophole in mapping service
1 Jan 2026
High1 Jan 2026
Central Maine Healthcare
Healthcare · 145,381 records
Data breach impacting personal, treatment, and health insurance information of 145,381 patients
1 Jan 2026
High1 Jan 2026
Fried Frank
Legal · Records not stated
Law firm data security incident affecting high-profile clients
1 Jan 2026
Critical1 Jan 2026
French Telecoms
Finance · Records not stated
October 2024 breach compromising personal data of 24+ million individuals, €42 million GDPR fine
1 Jan 2026
High1 Jan 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Yearslong data breach of residents' private health-related information exposed
1 Jan 2026
Critical1 Jan 2026
LiteLLM
Technology · Records not stated
Supply chain attack compromising over 2,500 organizations through distribution of information-stealing malware
1 Jan 2026
Were you affected?