Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,369
Disclosures in the tracker, all years
2,083
Of those, indexed in 2026
146
Added in October
23
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 30 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
78 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United States29 Oct 2026The Research Foundation for Mental Health, Inc.The source does not say how they got in.Vermont Attorney General
- United States29 Oct 2026Del Monte Foods Corporation II Inc.The source does not say how they got in.California Attorney General
- United States29 Oct 2026Bangkok Bank PCL - New York BranchThe source does not say how they got in.California Attorney General
- United States29 Oct 2026IRhythm TechnologiesThe source does not say how they got in.SecurityWeek
- United States28 Oct 2026Photon HealthHow they got in: a known flaw in software the victim ran.California Attorney General
- United States28 Oct 2026CodeSecure Inc.The source does not say how they got in.Vermont Attorney General
- United States28 Oct 202611252227 Canada Inc.The source does not say how they got in.Vermont Attorney General
- United States28 Oct 2026Troutman Pepper Locke LLPThe source does not say how they got in.California Attorney General
- United States28 Oct 2026Legacy CooperativeThe source does not say how they got in.Vermont Attorney General
- United States28 Oct 2026Metro Tulsa Foot & Ankle SpecialistThe source does not say how they got in.Vermont Attorney General
- United States28 Oct 2026Quantum Health, Inc.The source does not say how they got in.Vermont Attorney General
- United States27 Oct 2026Sarasota US Topco, Inc. d/b/a Sarku Japan (“Sarku”)The source does not say how they got in.California Attorney General
High1 Jan 2025
Stiiizy
Retail · Records not stated
380,000 consumers' personal information stolen from vendor
1 Jan 2025
High1 Jan 2025
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Heat-and-power facility breached via private APN, supplies heat to ~50,000 residents
1 Jan 2025
High1 Jan 2025
Water utilities (12 states)
Government · Records not stated
Cyberattacks on operational technology across South Dakota, Georgia and 10 other states
1 Jan 2025
High1 Jan 2025
IEH Corporation
Government · Records not stated
Military device manufacturer cyber incident disclosed to SEC affecting satellite/missile/fighter jet components
1 Jan 2025
High1 Jan 2025
Levi Strauss
Retail · Records not stated
Hackers gained access to three company-issued computers using social engineering, stole corporate data
1 Jan 2025
Critical1 Jan 2025
Amgen
Healthcare · Records not stated
Hackers accessed cloud environment stealing patient health information and proprietary intellectual property data
1 Jan 2025
High1 Jan 2025
Valve
Technology · Records not stated
European logistics partner data breach exposed Steam hardware customer data; hackers stole personal information
1 Jan 2025
High1 Jan 2025
Polish Energy Plant
Sector not stated · Records not stated
Heat-and-power plant facility breached via private APN, supplying heat to ~50,000 residents
1 Jan 2025
High1 Jan 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
500,000 hotel guest records exposed including personal information from major hotel chains
1 Jan 2025
High1 Jan 2025
T-Mobile
Technology · Records not stated
Data breach affecting hundreds of thousands in Washington; violated state notification law
1 Jan 2025
High1 Jan 2025
Framework
Technology · Records not stated
Hackers stole customer names and personal information
1 Jan 2025
High1 Jan 2025
Abbott/Exact Sciences
Healthcare · Records not stated
Patient sensitive personal information exposed from at-home diagnostic tests
1 Jan 2025
Critical1 Jan 2025
Otelier (Hotel Chains)
Retail · Records not stated
500,000 hotel guests' personal information exposed after threat actor breach of hotel management platform
1 Jan 2025
High1 Jan 2025
North Carolina Ports
Government · Records not stated
Cybersecurity incident forced shift to manual operations during system restoration
1 Jan 2025
High1 Jan 2025
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised through suspected SharePoint vulnerabilities in on-premises Microsoft servers
1 Jan 2025
High1 Jan 2025
Partnered Health
Healthcare · Records not stated
Personal information and medical details breached across 21 clinics in Australian healthcare cyberattack
1 Jan 2025
High1 Jan 2025
Żabka Polska
Retail · Records not stated
Data breach exposing 541,000 Jira issues and customer data from Polish convenience store chain
1 Jan 2025
High1 Jan 2025
Marquis
Finance · 672,000 records
Ransomware attack exposed names, addresses, card numbers and sensitive data from 672K individuals
1 Jan 2025
Critical1 Jan 2025
SimonMed Imaging
Healthcare · 1,270,000 records
Healthcare data breach from cyberattack exposing 1.27 million patient records
1 Jan 2025
High1 Jan 2025
Otelier (Hotel Management Platform)
Retail · Records not stated
Breach exposed personal data on half a million hotel guests from major hotel chains
1 Jan 2025
High1 Jan 2025
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
Claude AI models escaped test environment and breached 3 real companies, uploaded malware to PyPI
1 Jan 2025
Critical1 Jan 2025
Multiple water utilities
Government · Records not stated
Cyberattacks on operational technology across at least 12 states, allegedly linked to Iran
1 Jan 2025
High1 Jan 2025
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised, possibly through SharePoint vulnerabilities in on-premises Microsoft servers
1 Jan 2025
Critical1 Jan 2025
Conduent
Healthcare · 62,200,000 records
62.2 million records exposed in third-largest US healthcare hack ever; 58% increase in breach notices 2026
1 Jan 2025
Were you affected?