Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,352
Disclosures in the tracker, all years
2,066
Of those, indexed in 2026
125
Added in October
17
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 27 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
75 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United States26 Oct 2026Monmouth UniversityThe source does not say how they got in.Vermont Attorney General
- United States26 Oct 2026Denver Health Medical PlanThe source does not say how they got in.HIPAA Journal
- United States24 Oct 2026Brooklyn Counseling ServicesThe source does not say how they got in.Vermont Attorney General
- United States24 Oct 2026Northeastern Mental Health CenterThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026Industrial and healthcare organizationsHow they got in: a known flaw in software the victim ran.The Hacker News
- United States23 Oct 2026RL Schreiber, Inc.The source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026Ford Audio-Video Systems, LLCThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026EyeMed Vision Care, LLCThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026Alabama Fire CollegeThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026UltraMobile ImagingThe source does not say how they got in.HIPAA Journal
- United States23 Oct 2026Washington GastroenterologyThe source does not say how they got in.HIPAA Journal
- United States23 Oct 2026Tarter Krinsky & DroginThe source does not say how they got in.HIPAA Journal
High1 Jan 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Years-long data breach of residents' private health-related information affecting state health program beneficiaries
1 Jan 2026
Critical1 Jan 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
High-profile data breach; Montana court cleared path for regulatory enforcement action
1 Jan 2026
High1 Jan 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Yearslong data breach of residents' private health-related information discovered
1 Jan 2026
High1 Jan 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Patient data compromised in third-party vendor breach from 2025 Cerner incident
1 Jan 2026
High1 Jan 2026
HCL Technologies
Technology · Records not stated
Hacker group claimed access to employee data; company stated data may be years-old
1 Jan 2026
High1 Jan 2026
Huntsville Hospital
Healthcare · Records not stated
Patient health information compromised through third-party vendor breach
1 Jan 2026
Critical1 Jan 2026
Instructure
Education · Records not stated
Supply chain breach of Canvas platform generated 58% of all breach notices in 2026
1 Jan 2026
Critical1 Jan 2026
Amgen
Healthcare · Records not stated
Hackers accessed cloud environment, stealing patient health data and intellectual property
1 Jan 2026
High1 Jan 2026
Allstate
Finance · Records not stated
Data breach exposed employee-related records in insurance company cyber incident
1 Jan 2026
High1 Jan 2026
Yearslong breach
Healthcare · Records not stated
Yearslong breach exposed residents' private health-related information
1 Jan 2026
High1 Jan 2026
Stack Sports
Technology · Records not stated
Data breach exposed payment details and bank account numbers of users; financial account information compromised
1 Jan 2026
Critical1 Jan 2026
Fortinet FortiGate
Technology · Records not stated
FortiBleed campaign exposed administrative and VPN credentials for 73,932 FortiGate firewalls
1 Jan 2026
High1 Jan 2026
Valve
Technology · Records not stated
Steam hardware customer data stolen via European logistics partner breach
1 Jan 2026
High1 Jan 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Years-long data breach of residents' private health-related information exposed
1 Jan 2026
Critical1 Jan 2026
MCBS
Healthcare · 1,260,000 records
1.26 million patients exposed in PEAR ransomware attack on medical billing system
1 Jan 2026
Critical1 Jan 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Classified networks compromised with China-linked malware via USB drives, undetected for nearly a year
1 Jan 2026
Critical1 Jan 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Inadvertent exposure of personal information for 700,000 state residents
1 Jan 2026
High1 Jan 2026
LexisNexis
Legal · Records not stated
Suspicious server activity led to shutdown of Diligence, Metabase API, and Newsdesk services
1 Jan 2026
High1 Jan 2026
Years-long data breach exposing residents' private health-related information
Government · Records not stated
Years-long data breach exposing residents' private health-related information
1 Jan 2026
Critical1 Jan 2026
IEH Corporation
Government · Records not stated
Microsoft 365 phishing breach exposed mailbox and possibly export-controlled military technology details
1 Jan 2026
High1 Jan 2026
Booz Allen
Technology · Records not stated
Tax records breach at consulting firm; Treasury cuts ties
1 Jan 2026
Critical1 Jan 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Inadvertent exposure of personal information of 700,000 state residents
1 Jan 2026
Critical1 Jan 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Inadvertent exposure of personal data belonging to 700,000 state residents
1 Jan 2026
Critical1 Jan 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Inadvertent exposure of personal data for 700,000 state residents
1 Jan 2026
Were you affected?