Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,370
Disclosures in the tracker, all years
2,084
Of those, indexed in 2026
0
Added in November
22
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 1 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
77 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United States30 Oct 2026The Krum Public LibraryThe source does not say how they got in.Vermont Attorney General
- United States30 Oct 2026Marathon HealthThe source does not say how they got in.Vermont Attorney General
- United States29 Oct 2026BRANDco., LLCThe source does not say how they got in.Vermont Attorney General
- United States29 Oct 2026Revolve Group, Inc.The source does not say how they got in.Vermont Attorney General
- United States29 Oct 2026The Research Foundation for Mental Health, Inc.The source does not say how they got in.Vermont Attorney General
- United States29 Oct 2026Del Monte Foods Corporation II Inc.The source does not say how they got in.California Attorney General
- United States29 Oct 2026Bangkok Bank PCL - New York BranchThe source does not say how they got in.California Attorney General
- United States29 Oct 2026IRhythm TechnologiesThe source does not say how they got in.SecurityWeek
- United States28 Oct 2026Blueberry PediatricsHow they got in: a known flaw in software the victim ran.HIPAA Journal
- United States28 Oct 2026CodeSecure Inc.The source does not say how they got in.Vermont Attorney General
- United States28 Oct 202611252227 Canada Inc.The source does not say how they got in.Vermont Attorney General
- United States28 Oct 2026Troutman Pepper Locke LLPThe source does not say how they got in.California Attorney General
High1 Dec 2024
River Financial Corporation
Finance · Records not stated
Ransomware attack; hackers stole data and later confirmed deletion
1 Dec 2024
Critical1 Dec 2024
Canada Life
Finance · 5,500,000 records
Threat actor claims 5.5 million records for sale including customer, employee, and corporate data
1 Dec 2024
High1 Dec 2024
Ecopetrol
Sector not stated · 3,300 records
Cyberattack stole data tied to approximately 3,300 user accounts at Colombian state energy company
1 Dec 2024
Critical1 Dec 2024
Accenture
Technology · Records not stated
Threat actor stole vast trove of sensitive data from consulting giant in cyberattack
1 Dec 2024
Critical1 Dec 2024
Trizetto Provider Solutions
Healthcare · 3,400,000 records
Unauthorized access to IT environment exposed PHI of 3.4 million individuals
1 Dec 2024
High1 Dec 2024
FirstClass (Australian travel agency)
Retail · Records not stated
Customer records allegedly breached; threat actor claims on underground forums
1 Dec 2024
Critical1 Dec 2024
Qantas
Sector not stated · 5,670,000 records
5.67 million customer records exposed via vishing attack including personal and travel information
1 Dec 2024
Critical1 Dec 2024
UnitedHealthcare
Healthcare · Records not stated
2024 cyberattack exposing sensitive health and insurance data from millions of patients
1 Dec 2024
Critical1 Dec 2024
Tribeca Film Festival
Sector not stated · 666,000 records
Unprotected database exposed 666,000 records including celebrity contact data without password or encryption
1 Dec 2024
Critical1 Dec 2024
McLaren Health Care
Healthcare · 3,200,000 records
Two ransomware attacks in 2023 and 2024 affecting 3.2 million patients, settled class-action for $14M
1 Dec 2024
Critical1 Dec 2024
Meta
Technology · Records not stated
2018 data breach; EU privacy regulator fined Meta 251 million euros for violations
1 Dec 2024
High1 Dec 2024
South Florida Injury Centers
Healthcare · 1,525 records
Data breach exposed 1,525 records including SSNs and medical records (PHI/PII)
1 Dec 2024
Critical1 Dec 2024
Revolut
Finance · 75,000,000 records
75 million customer records including credit card data allegedly exposed for sale
1 Dec 2024
High1 Dec 2024
PowerSchool
Education · Records not stated
Cyberattack in Dec 2024 exposed student and staff data from thousands of schools
1 Dec 2024
High29 Nov 2024
Krispy Kreme
Technology · Records not stated
Play ransomware attack disrupted online ordering systems
29 Nov 2024
High28 Nov 2024
Alder Hey Children's Hospital
Healthcare · Records not stated
INC Ransom gang stole patient records from Liverpool children's hospital
28 Nov 2024
High25 Nov 2024
Wirral University Teaching Hospital
Healthcare · Records not stated
Cyberattack forced hospital to declare major incident, systems offline for days
25 Nov 2024
Medium22 Nov 2024
The Real World
Education · 324,382 records
324,382 records exposed, Chat logs, Email addresses, Usernames
22 Nov 2024
High21 Nov 2024
Morrisons (Blue Yonder)
Sector not stated · Records not stated
UK grocery operations disrupted in supply chain attack
21 Nov 2024
High21 Nov 2024
Starbucks (Blue Yonder)
Sector not stated · Records not stated
Employee scheduling disrupted in supply chain ransomware
21 Nov 2024
Critical21 Nov 2024
Blue Yonder
Technology · Records not stated
Supply chain SaaS provider hit by ransomware affecting Starbucks, grocery chains
21 Nov 2024
High20 Nov 2024
FlipaClip
Technology · 892,854 records
892,854 records exposed, Dates of birth, Email addresses, Geographic locations, Names
20 Nov 2024
Medium19 Nov 2024
Finsure
Finance · 296,124 records
296,124 records exposed, Email addresses, Names, Phone numbers, Physical addresses
19 Nov 2024
Critical13 Nov 2024
DemandScience by Pure Incubation
Technology · 121,796,165 records
121,796,165 records exposed, Email addresses, Employers, Job titles, Names and 3 more
13 Nov 2024
Were you affected?