Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,352
Disclosures in the tracker, all years
2,066
Of those, indexed in 2026
125
Added in October
17
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 27 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
75 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United States26 Oct 2026Monmouth UniversityThe source does not say how they got in.Vermont Attorney General
- United States26 Oct 2026Denver Health Medical PlanThe source does not say how they got in.HIPAA Journal
- United States24 Oct 2026Brooklyn Counseling ServicesThe source does not say how they got in.Vermont Attorney General
- United States24 Oct 2026Northeastern Mental Health CenterThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026Industrial and healthcare organizationsHow they got in: a known flaw in software the victim ran.The Hacker News
- United States23 Oct 2026RL Schreiber, Inc.The source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026Ford Audio-Video Systems, LLCThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026EyeMed Vision Care, LLCThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026Alabama Fire CollegeThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026UltraMobile ImagingThe source does not say how they got in.HIPAA Journal
- United States23 Oct 2026Washington GastroenterologyThe source does not say how they got in.HIPAA Journal
- United States23 Oct 2026Tarter Krinsky & DroginThe source does not say how they got in.HIPAA Journal
Critical1 Jan 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Inadvertent exposure of personal information for over 700,000 state residents
1 Jan 2026
Critical1 Jan 2026
Canada Life
Finance · 5,500,000 records
Threat actor claims 5.5 million customer, employee, and corporate records exposed for sale
1 Jan 2026
Critical1 Jan 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Inadvertent exposure of personal information belonging to over 700,000 state residents
1 Jan 2026
High1 Jan 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Cyberattacks on operational technology across water systems in South Dakota, Georgia and 10 other states
1 Jan 2026
High1 Jan 2026
North Carolina Ports Authority
Sector not stated · Records not stated
Port of Wilmington cyberattack disrupted IT systems and operations
1 Jan 2026
Critical1 Jan 2026
Unlimited Technology Systems
Healthcare · 3,800,000 records
3.8 million people impacted by data breach at healthcare software company
1 Jan 2026
High1 Jan 2026
Exact Sciences/Abbott
Healthcare · Records not stated
Sensitive personal health information exposed from at-home diagnostic tests
1 Jan 2026
High1 Jan 2026
Law firm (New Jersey)
Legal · 13,000 records
Cyberattack exposed hospital records and personal data of approximately 13,000 patients
1 Jan 2026
Critical1 Jan 2026
MCBS Medical
Healthcare · 1,260,000 records
1.26 million patients exposed in PEAR ransomware attack on medical billing/practice-management system
1 Jan 2026
Critical1 Jan 2026
Instructure Canvas
Education · Records not stated
Supply chain breach generating 58% of all breach notices in 2026
1 Jan 2026
Critical1 Jan 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Classified networks compromised via China-made malware USB drives; breach undetected for nearly a year
1 Jan 2026
High1 Jan 2026
TrueConf
Technology · Records not stated
Client installers compromised with backdoors after server breach by Head Mare group
1 Jan 2026
High1 Jan 2026
Unnamed Law Firm
Legal · 13,000 records
Law firm breach exposed hospital patient records for approximately 13,000 patients in New Jersey
1 Jan 2026
High1 Jan 2026
Oregon DEQ
Government · Records not stated
Department of Environmental Quality leaked thousands of people's personal information
1 Jan 2026
Critical1 Jan 2026
Coldcard
Technology · Records not stated
Hardware wallet data breach resulting in theft of over $100M worth of bitcoin
1 Jan 2026
High1 Jan 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack stole data; hackers confirmed deletion of stolen information
1 Jan 2026
High1 Jan 2026
Framework
Technology · Records not stated
Hackers stole customer names and personal information from computer maker
1 Jan 2026
High1 Jan 2026
Multi-year data breach of residents' health-related information
Government · Records not stated
Multi-year data breach of residents' health-related information
1 Jan 2026
High1 Jan 2026
Uzbekistan Government Agencies
Government · 60,000 records
Cyberattack on government agencies exposing 60,000 records
1 Jan 2026
Critical1 Jan 2026
Multiple Water Utilities
Government · Records not stated
Cyberattacks on operational technology across at least 12 US states; Iranian-linked campaign
1 Jan 2026
High1 Jan 2026
Quantum Health
Healthcare · Records not stated
Healthcare advocacy vendor breach exposed employees' Social Security numbers
1 Jan 2026
High1 Jan 2026
Yearslong breach exposing residents' private health-related information
Healthcare · Records not stated
Yearslong breach exposing residents' private health-related information
1 Jan 2026
High1 Jan 2026
Swiss Federal Government
Government · Records not stated
SharePoint server breach compromised 200 government accounts
1 Jan 2026
High1 Jan 2026
Personal information of thousands
Government · Records not stated
Personal information of thousands leaked; agency delayed public notification for months
1 Jan 2026
Were you affected?