Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,352
Disclosures in the tracker, all years
2,066
Of those, indexed in 2026
125
Added in October
16
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 28 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
74 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United States26 Oct 2026Monmouth UniversityThe source does not say how they got in.Vermont Attorney General
- United States26 Oct 2026Denver Health Medical PlanThe source does not say how they got in.HIPAA Journal
- United States24 Oct 2026Brooklyn Counseling ServicesThe source does not say how they got in.Vermont Attorney General
- United States24 Oct 2026Northeastern Mental Health CenterThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026RL Schreiber, Inc.The source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026Ford Audio-Video Systems, LLCThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026EyeMed Vision Care, LLCThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026Alabama Fire CollegeThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026UltraMobile ImagingThe source does not say how they got in.HIPAA Journal
- United States23 Oct 2026Washington GastroenterologyThe source does not say how they got in.HIPAA Journal
- United States23 Oct 2026Tarter Krinsky & DroginThe source does not say how they got in.HIPAA Journal
- United States23 Oct 2026Quest DiagnosticsThe source does not say how they got in.SecurityWeek
High1 Jan 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Yearslong data breach of residents' private health-related information reported in January 2026
1 Jan 2026
High1 Jan 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
Data breach resulting in €42 million fine for cybersecurity vulnerabilities and GDPR violations
1 Jan 2026
High1 Jan 2026
Coca-Cola (Fairlife)
Retail · Records not stated
Ransomware attack on dairy subsidiary resulted in data breach; operational shutdown confirmed
1 Jan 2026
High1 Jan 2026
France Telco Subsidiaries
Technology · Records not stated
Data regulator fined €42 million for cybersecurity vulnerabilities contributing to 2024 breach; three major GDPR violations including lack of basic security controls
1 Jan 2026
High1 Jan 2026
Yearslong data breach
Government · Records not stated
Yearslong data breach exposed residents' private health-related information
1 Jan 2026
High1 Jan 2026
Yearslong data breach exposing residents' private health-related information
Healthcare · Records not stated
Yearslong data breach exposing residents' private health-related information
1 Jan 2026
High1 Jan 2026
Orange (France telecom subsidiaries)
Technology · Records not stated
Fined €42 million for cybersecurity vulnerabilities contributing to 2024 breach; three major GDPR violations
1 Jan 2026
High1 Jan 2026
Epic Systems
Healthcare · 300,000 records
300,000 people's digital health information records were accessed and sold from health records networks to law firms
1 Jan 2026
High1 Jan 2026
France telecom subsidiaries
Technology · Records not stated
Data breach in 2024 resulted in €42 million fine for cybersecurity vulnerabilities and lack of basic security controls
1 Jan 2026
High1 Jan 2026
FirstClass Travel
Sector not stated · Records not stated
Australian travel agency customer records allegedly breached, claimed on underground hacking forums
1 Jan 2026
High1 Jan 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
Data regulator fined $42-48 million for cybersecurity vulnerabilities contributing to 2024 data breach
1 Jan 2026
Medium1 Jan 2026
FirstClass Travel Agency
Sector not stated · Records not stated
Sydney-based travel agency; threat actor on underground forum alleged customer records breach
1 Jan 2026
High1 Jan 2026
Multi-year data breach of residents' private health-related information
Government · Records not stated
Multi-year data breach of residents' private health-related information
1 Jan 2026
High1 Jan 2026
French Telecom Subsidiaries
Technology · Records not stated
Data breach with inadequate security controls resulted in €42M GDPR fines from French data regulator
1 Jan 2026
High1 Jan 2026
Multi-year data breach
Healthcare · Records not stated
Multi-year data breach exposed residents' private health-related information
1 Jan 2026
High1 Jan 2026
French Telco Subsidiaries
Technology · Records not stated
Data regulator fined subsidiaries €42 million for cybersecurity vulnerabilities contributing to 2024 breach
1 Jan 2026
Critical1 Jan 2026
Armenia Government
Government · Records not stated
Alleged sale of 8M government records on hacker forum; authorities launched investigation
1 Jan 2026
High1 Jan 2026
Tribeca Film Festival
Sector not stated · 666,000 records
Unprotected database exposed 666,000 records including celebrity contact information with no password or encryption
1 Jan 2026
Critical1 Jan 2026
Qantas
Sector not stated · 5,670,000 records
Vishing attack exposed 5.67 million customer records including personal and travel data
1 Jan 2026
High1 Jan 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Yearslong data breach of residents' private health-related information reported
1 Jan 2026
Critical1 Jan 2026
Armenian Government
Government · Records not stated
Hackers offered 8 million government records for sale on hacker forum
1 Jan 2026
High1 Jan 2026
KT Corp
Technology · Records not stated
Data breach resulting in significant fine from South Korea's Personal Information Protection Commission
1 Jan 2026
High1 Jan 2026
FirstClass
Retail · Records not stated
Australian travel agency - customer records allegedly breached, threat actor posted on underground forums.
1 Jan 2026
High1 Jan 2026
Yearslong data breach of residents' private health-related information
Government · Records not stated
Yearslong data breach of residents' private health-related information
1 Jan 2026
Were you affected?