Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,314
Disclosures in the tracker, all years
2,028
Of those, indexed in 2026
76
Added in October
21
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 21 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
72 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United States21 Oct 2026Critical infrastructure organizations worldwideHow they got in: stolen or reused passwords.BleepingComputer
- United States20 Oct 2026Conduent Business Services, LLCThe source does not say how they got in.HIPAA Journal
- United States20 Oct 2026Central Ohio Primary Care PhysiciansHow they got in: stolen or reused passwords.HIPAA Journal
- United States20 Oct 2026Educational Testing ServiceThe source does not say how they got in.The Record
- United States20 Oct 2026Chevy Chase ClubThe source does not say how they got in.Vermont Attorney General
- United States20 Oct 2026Paradigm Healthcare ServicesThe source does not say how they got in.SecurityWeek
- United States19 Oct 2026Computer Task Group, IncorporatedThe source does not say how they got in.Vermont Attorney General
- United States19 Oct 2026Citizens BankThe source does not say how they got in.California Attorney General
- United States19 Oct 2026STS Aviation GroupThe source does not say how they got in.California Attorney General
- United States18 Oct 2026Stitch Connect IncThe source does not say how they got in.California Attorney General
- United States17 Oct 2026Catawba CountyThe source does not say how they got in.Vermont Attorney General
- United States16 Oct 2026Johnson Investment CounselThe source does not say how they got in.Vermont Attorney General
High1 Aug 2026
Insecure CMS led to sensitive data
Government · Records not stated
Insecure CMS led to sensitive data leak from criminal records office
1 Aug 2026
High1 Aug 2026
Fairlife (Coca-Cola)
Retail · Records not stated
Ransomware attack shut down dairy operations, data exposure from attack
1 Aug 2026
High1 Aug 2026
CEVA Logistics/Steam
Technology · Records not stated
CEVA Logistics hack exposed Steam customer names and addresses of European hardware buyers
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Unpatched CMS led to sensitive criminal records data leak
1 Aug 2026
High1 Aug 2026
Coca-Cola Dairy (Coca-Cola)
Retail · Records not stated
Ransomware attack shut down dairy operations; $4 billion brand affected
1 Aug 2026
High1 Aug 2026
WellPoint Texas
Healthcare · Records not stated
Personal information exposure; class action investigation launched
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Woeful security practices led to sensitive criminal records data leak
1 Aug 2026
Critical1 Aug 2026
Estée Lauder
Retail · Records not stated
Data breach via Oracle E-Business Suite exposed SSNs, passports, health records in Clop campaign
1 Aug 2026
Critical1 Aug 2026
Tribeca Festival
Sector not stated · Records not stated
Data leak exposed hundreds of thousands of records and celebrities' contact information
1 Aug 2026
Medium1 Aug 2026
Health Sciences Centre
Healthcare · Records not stated
Ransomware attack affecting facility maintenance systems including HVAC
1 Aug 2026
High1 Aug 2026
Woeful security led to sensitive data
Government · Records not stated
Woeful security led to sensitive data leak from unpatched CMS
1 Aug 2026
High1 Aug 2026
Woeful security led to sensitive data
Government · Records not stated
Woeful security led to sensitive data leak; uncertainty over exfiltration
1 Aug 2026
High1 Aug 2026
Valve/Steam
Technology · Records not stated
European logistics partner CEVA Logistics breached; customer names, addresses, order data stolen affecting Steam hardware shipments
1 Aug 2026
High1 Aug 2026
Uber Freight
Technology · Records not stated
Hacking and extortion gang claimed data breach at ridesharing giant's logistics division
1 Aug 2026
High1 Aug 2026
Woeful security led to sensitive criminal records data
Government · Records not stated
Woeful security led to sensitive criminal records data leak, exfiltration status unknown
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Woeful security led to sensitive data leak from criminal records system
1 Aug 2026
High1 Aug 2026
Woeful security led to sensitive criminal data
Government · Records not stated
Woeful security led to sensitive criminal data leak exposure
1 Aug 2026
Critical1 Aug 2026
LiteLLM (AI supply chain)
Technology · Records not stated
2,500+ companies and 434,000 CI/CD pipelines exposed in largest AI supply chain breach of 2026
1 Aug 2026
High1 Aug 2026
Healthcare advocacy vendor breach
Healthcare · Records not stated
Healthcare advocacy vendor breach exposed employees' Social Security numbers
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Poor security at criminal records office led to sensitive data leak exposure
1 Aug 2026
Critical1 Aug 2026
SplitVPN
Technology · 865,000 records
865,000 users' personal records exposed in data breach of Russian VPN provider
1 Aug 2026
High1 Aug 2026
Shipping partner breach
Technology · Records not stated
Shipping partner breach exposed names, addresses, and order data of European Steam hardware customers
1 Aug 2026
High1 Aug 2026
Allstate
Finance · Records not stated
Breach claimed to involve employee-related records; scope of exposure still unclear
1 Aug 2026
High1 Aug 2026
Valve (CEVA Logistics)
Technology · Records not stated
European logistics partner CEVA Logistics breached, exposing Steam hardware customer names, addresses, and order data
1 Aug 2026
Were you affected?