Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,352
Disclosures in the tracker, all years
2,066
Of those, indexed in 2026
125
Added in October
16
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 28 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
74 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United States26 Oct 2026Monmouth UniversityThe source does not say how they got in.Vermont Attorney General
- United States26 Oct 2026Denver Health Medical PlanThe source does not say how they got in.HIPAA Journal
- United States24 Oct 2026Brooklyn Counseling ServicesThe source does not say how they got in.Vermont Attorney General
- United States24 Oct 2026Northeastern Mental Health CenterThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026RL Schreiber, Inc.The source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026Ford Audio-Video Systems, LLCThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026EyeMed Vision Care, LLCThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026Alabama Fire CollegeThe source does not say how they got in.Vermont Attorney General
- United States23 Oct 2026UltraMobile ImagingThe source does not say how they got in.HIPAA Journal
- United States23 Oct 2026Washington GastroenterologyThe source does not say how they got in.HIPAA Journal
- United States23 Oct 2026Tarter Krinsky & DroginThe source does not say how they got in.HIPAA Journal
- United States23 Oct 2026Quest DiagnosticsThe source does not say how they got in.SecurityWeek
Critical1 Dec 2025
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patients exposed in PEAR ransomware attack on medical billing company
1 Dec 2025
High1 Dec 2025
T-Mobile
Technology · Records not stated
Data breach affecting hundreds of thousands in Washington state
1 Dec 2025
Critical1 Dec 2025
Ernst & Young
Legal · Records not stated
Names, addresses, Social Security numbers, and financial data stolen from third-party platform
1 Dec 2025
High1 Dec 2025
Abbott Laboratories
Healthcare · Records not stated
Cyber incident investigating potential data exposure
1 Dec 2025
Critical1 Dec 2025
Mexican Government Agencies
Government · Records not stated
Single hacker exploited Claude Code and OpenAI tools to breach 9 federal agencies, millions of records stolen
1 Dec 2025
High1 Dec 2025
KT Corp
Technology · Records not stated
Rogue femtocell breach exposed 16,647 subscribers; SMS payment credentials stolen
1 Dec 2025
Critical1 Dec 2025
Multiple Sources (Credential Compilation)
Technology · 2,000,000,000 records
2 billion emails and 1.2 billion passwords compromised in massive data compilation
1 Dec 2025
High1 Dec 2025
Water utilities (12 states)
Government · Records not stated
Cyberattacks on operational technology systems across at least 12 US states including South Dakota and Georgia
1 Dec 2025
High1 Dec 2025
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Wave of cyberattacks targeting hedge funds and private-equity firms linked to UNC6671 extortion group
1 Dec 2025
High1 Dec 2025
TrueConf
Technology · Records not stated
Hackers breached video conferencing servers and trojanized client installers with backdoors via SQL injection exploitation
1 Dec 2025
High1 Dec 2025
North Carolina Ports Authority
Government · Records not stated
Cyberattack disrupted IT systems and operations at Port of Wilmington; systems being restored
1 Dec 2025
High1 Dec 2025
Trust Wallet
Finance · Records not stated
2000+ cryptocurrency wallets drained; incident disclosed December 2025
1 Dec 2025
High1 Dec 2025
Exact Sciences / Abbott
Healthcare · Records not stated
Data breach exposed sensitive personal information from at-home diagnostic test users
1 Dec 2025
High1 Dec 2025
North Carolina Ports
Sector not stated · Records not stated
Cyberattack forced shift to manual operations, systems restoration in progress
1 Dec 2025
Critical1 Dec 2025
Credential Compilation (Multiple Sources)
Technology · 2,000,000,000 records
2 billion emails and 1.2 billion passwords compromised in massive compilation
1 Dec 2025
Critical1 Dec 2025
Prosper Marketplace and 700Credit
Finance · 20,000,000 records
Data breach affecting approximately 20 million individuals across fintech and car dealership services
1 Dec 2025
High1 Dec 2025
Law firm (unnamed)
Legal · 13,000 records
Cyberattack exposed hospital patient records for 13,000 patients in New Jersey
1 Dec 2025
High1 Dec 2025
Leroy Merlin
Retail · Records not stated
Loyalty program data breach affecting customers
1 Dec 2025
Medium1 Dec 2025
Ecopetrol
Sector not stated · 3,300 records
Cyberattack stole data linked to approximately 3,300 user accounts
1 Dec 2025
Critical1 Dec 2025
Credential Compilation
Sector not stated · 2,000,000,000 records
2 billion emails and 1.2 billion passwords exposed in massive credential compilation
1 Dec 2025
Critical1 Dec 2025
Canada Life
Finance · 5,500,000 records
Threat actor claimed 5.5 million records exposed including customer, employee, and corporate data via Salesforce
1 Dec 2025
Critical1 Dec 2025
Essex NHS Trust
Healthcare · 900,000 records
Thousands of NHS patient records stolen in cyber attack, breach disclosed over six months after notification
1 Dec 2025
Critical1 Dec 2025
Multiple (Compilation)
Technology · 2,000,000,000 records
2 billion emails and 1.2 billion passwords compromised in massive credential compilation
1 Dec 2025
Critical1 Dec 2025
Multiple (Compilation Leak)
Technology · 2,000,000,000 records
2 billion emails and 1.2 billion passwords compromised in massive credential compilation
1 Dec 2025
Were you affected?