Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,491
Disclosures in the tracker, all years
2,079
Of those, indexed in 2026
141
Added in October
18
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 30 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
76 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United States28 Oct 2026Legacy CooperativeThe source does not say how they got in.Vermont Attorney General
- United States28 Oct 2026Metro Tulsa Foot & Ankle SpecialistThe source does not say how they got in.Vermont Attorney General
- United States28 Oct 2026Quantum Health, Inc.The source does not say how they got in.Vermont Attorney General
- United States27 Oct 2026Directed Trust CompanyThe source does not say how they got in.Vermont Attorney General
- United States27 Oct 2026NorthShore Health CentersThe source does not say how they got in.HIPAA Journal
- United States27 Oct 2026University of New Mexico Health SystemThe source does not say how they got in.The Record
- United States26 Oct 2026Chisholm, Persson & Ball, P.C.The source does not say how they got in.Vermont Attorney General
- United States26 Oct 2026Alpha Omega Alpha Honor Medical SocietyThe source does not say how they got in.Vermont Attorney General
- United States26 Oct 2026USForex Inc.The source does not say how they got in.California Attorney General
- United States26 Oct 2026Monmouth UniversityThe source does not say how they got in.Vermont Attorney General
- United States26 Oct 2026Denver Health Medical PlanThe source does not say how they got in.HIPAA Journal
- United States24 Oct 2026Brooklyn Counseling ServicesThe source does not say how they got in.Vermont Attorney General
High1 Aug 2025
Cerner (Third-party vendor)
Healthcare · Records not stated
Patient data breach affecting Huntsville Hospital and other health systems
1 Aug 2025
High1 Aug 2025
Klaviyo
Technology · Records not stated
Marketing tech platform inadvertently shared user sign-up information including passwords with advertisers
1 Aug 2025
High1 Aug 2025
Framework
Technology · Records not stated
Computer maker breach exposing names, email addresses, phone numbers, and physical addresses to all customers
1 Aug 2025
High1 Aug 2025
Huntsville Hospital
Healthcare · Records not stated
Patient health information compromised through third-party vendor Cerner breach in August 2025
1 Aug 2025
High1 Aug 2025
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Patient data compromised through third-party vendor, unauthorized access by third party
1 Aug 2025
High1 Aug 2025
Cerner (via Huntsville Hospital)
Healthcare · Records not stated
Patient health information compromised through third-party vendor breach affecting hospital systems
1 Aug 2025
Critical1 Aug 2025
Gaming Industry (Multiple)
Technology · Records not stated
11 million gaming account credentials exposed in data leaks during 2024
1 Aug 2025
Critical1 Aug 2025
Optus
Finance · Records not stated
2022 data breach, Australian privacy regulator sued carrier for privacy law violations
1 Aug 2025
Critical1 Aug 2025
Gaming platforms
Technology · Records not stated
11 million gaming account credentials exposed in 2024 data leaks
1 Aug 2025
High1 Aug 2025
Gaming Accounts (Multiple Platforms)
Technology · Records not stated
Over 11 million gaming account credentials exposed in 2024 data leaks
1 Aug 2025
High1 Aug 2025
Multiple Gaming Services
Technology · Records not stated
11 million gaming account credentials exposed in data leaks affecting multiple gaming platforms
1 Aug 2025
Critical1 Aug 2025
Gaming Accounts (Multiple)
Technology · Records not stated
Over 11 million gaming account credentials exposed with login information compromised
1 Aug 2025
High1 Aug 2025
North Carolina Ports Authority
Government · Records not stated
Cyberattack disrupted IT systems and operations at Port of Wilmington, forced shift to manual operations
1 Aug 2025
High1 Aug 2025
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Electronic health record system breach affecting Huntsville Hospital patients
1 Aug 2025
High1 Aug 2025
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised; anomalies detected in on-premises Microsoft servers
1 Aug 2025
High1 Aug 2025
Cerner (HHS vendor)
Healthcare · Records not stated
Unauthorized third party breached electronic health record system affecting hospital patients
1 Aug 2025
High1 Aug 2025
Cerner (Huntsville Hospital vendor)
Healthcare · Records not stated
EHR vendor breach affecting hospital patient records via unauthorized third party access
1 Aug 2025
High1 Aug 2025
Cerner (EHR Vendor)
Healthcare · Records not stated
Huntsville Hospital vendor breach affecting patient records via unauthorized third-party access
1 Aug 2025
High1 Aug 2025
Huntsville Hospital Health System
Healthcare · Records not stated
Third-party vendor data breach exposed patient information at hospital facilities
1 Aug 2025
High1 Aug 2025
Cerner
Healthcare · Records not stated
EHR vendor breach exposed patient data at Huntsville Hospital Health System and other healthcare systems.
1 Aug 2025
High1 Aug 2025
Cerner/Huntsville Hospital
Healthcare · Records not stated
EHR vendor breach notified healthcare systems of unauthorized third-party access
1 Aug 2025
High1 Aug 2025
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised via Microsoft SharePoint vulnerabilities on on-premises servers
1 Aug 2025
High1 Aug 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Data security incident, $40M settlement reached in class action
1 Aug 2025
High1 Aug 2025
Data security incident resulted in $40M settlement
Retail · Records not stated
Data security incident resulted in $40M settlement
1 Aug 2025
Were you affected?