Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,314
Disclosures in the tracker, all years
2,028
Of those, indexed in 2026
76
Added in October
21
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 21 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
72 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United States21 Oct 2026Critical infrastructure organizations worldwideHow they got in: stolen or reused passwords.BleepingComputer
- United States20 Oct 2026Conduent Business Services, LLCThe source does not say how they got in.HIPAA Journal
- United States20 Oct 2026Central Ohio Primary Care PhysiciansHow they got in: stolen or reused passwords.HIPAA Journal
- United States20 Oct 2026Educational Testing ServiceThe source does not say how they got in.The Record
- United States20 Oct 2026Chevy Chase ClubThe source does not say how they got in.Vermont Attorney General
- United States20 Oct 2026Paradigm Healthcare ServicesThe source does not say how they got in.SecurityWeek
- United States19 Oct 2026Computer Task Group, IncorporatedThe source does not say how they got in.Vermont Attorney General
- United States19 Oct 2026Citizens BankThe source does not say how they got in.California Attorney General
- United States19 Oct 2026STS Aviation GroupThe source does not say how they got in.California Attorney General
- United States18 Oct 2026Stitch Connect IncThe source does not say how they got in.California Attorney General
- United States17 Oct 2026Catawba CountyThe source does not say how they got in.Vermont Attorney General
- United States16 Oct 2026Johnson Investment CounselThe source does not say how they got in.Vermont Attorney General
Critical1 Aug 2026
RingCentral
Technology · 1,600,000 records
1.6 million users affected; names, addresses, emails, and phone numbers exposed
1 Aug 2026
High1 Aug 2026
Valve (Steam)
Technology · Records not stated
CEVA Logistics shipping partner breach exposed names, addresses, and order data of European hardware buyers
1 Aug 2026
High1 Aug 2026
Police National Legal Database
Government · Records not stated
Data theft of 135,000 contact records leaked on dark web by ExfilSquad
1 Aug 2026
Critical1 Aug 2026
Thailand Digital Ministry
Government · Records not stated
221 million login records exposed in state systems
1 Aug 2026
High1 Aug 2026
France DGFiP
Government · 678,000 records
Breach exposed 678,000 records including tax, business and property information
1 Aug 2026
High1 Aug 2026
River Financial Corporation
Finance · Records not stated
Ransomware attack; hackers confirmed deletion of stolen data from breach
1 Aug 2026
High1 Aug 2026
AnMed
Healthcare · Records not stated
Nonprofit health system cyberattack; facilities closed during recovery
1 Aug 2026
High1 Aug 2026
Comcast/Xfinity
Technology · 35,000,000 records
Cybersecurity breach exposed personal information; $117.5M settlement agreed
1 Aug 2026
Medium1 Aug 2026
Trezor
Technology · 13,689 records
Data breach leaked 13,689 customer records
1 Aug 2026
High1 Aug 2026
SafePal
Technology · 40,000 records
Data breach exposed home addresses of nearly 40,000 customers
1 Aug 2026
High1 Aug 2026
Uber Freight
Technology · Records not stated
Hacking group claims data breach; company investigating cyberattack on logistics division
1 Aug 2026
High1 Aug 2026
Beacon CRM
Sector not stated · Records not stated
Data breach affecting over 1,000 UK charities; root cause revealed
1 Aug 2026
Critical1 Aug 2026
Ceva Logistics
Sector not stated · Records not stated
Data breach exposed personal data affecting banks, retailers, and Steam gamers relying on shipping services
1 Aug 2026
Critical1 Aug 2026
Snowflake
Technology · 165,000,000 records
Credential-based cloud intrusion exposed over 100 million records (2024-2026 period)
1 Aug 2026
Critical1 Aug 2026
LiteLLM
Technology · Records not stated
AI supply chain breach exposed 2,500+ organizations and 434,000 CI/CD pipelines with credentials exposure
1 Aug 2026
High1 Aug 2026
Breach at CEVA Logistics
Technology · Records not stated
Breach at CEVA Logistics exposed names, addresses, and order data of European Steam hardware buyers
1 Aug 2026
High1 Aug 2026
Valve
Technology · Records not stated
European logistics partner data breach exposed customer information
1 Aug 2026
High1 Aug 2026
Levi Strauss
Retail · Records not stated
Corporate data stolen through social engineering targeting three employees
1 Aug 2026
Critical1 Aug 2026
Origin Energy
Sector not stated · 2,000,000 records
Hacker claims to have stolen information of 2 million customers
1 Aug 2026
High1 Aug 2026
Bank of Baroda
Finance · Records not stated
Compromised employee email account allowed unauthorized access to certain data
1 Aug 2026
High1 Aug 2026
Police National Legal Database
Government · Records not stated
135,000 contact records stolen and leaked on dark web by ExfilSquad
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
221 million login records exposed; Digital Ministry seeking MFA mandate on key state systems
1 Aug 2026
Critical1 Aug 2026
France DGFiP
Government · 678,000 records
Tax authority breach exposed records of 678,000 people and businesses with tax, business and property information
1 Aug 2026
Medium1 Aug 2026
Trezor
Technology · Records not stated
Third-party fulfillment partner breach exposed shipping addresses of 14,000 hardware wallet buyers
1 Aug 2026
Were you affected?