Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,314
Disclosures in the tracker, all years
2,028
Of those, indexed in 2026
76
Added in October
21
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 21 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
72 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United States21 Oct 2026Critical infrastructure organizations worldwideHow they got in: stolen or reused passwords.BleepingComputer
- United States20 Oct 2026Conduent Business Services, LLCThe source does not say how they got in.HIPAA Journal
- United States20 Oct 2026Central Ohio Primary Care PhysiciansHow they got in: stolen or reused passwords.HIPAA Journal
- United States20 Oct 2026Educational Testing ServiceThe source does not say how they got in.The Record
- United States20 Oct 2026Chevy Chase ClubThe source does not say how they got in.Vermont Attorney General
- United States20 Oct 2026Paradigm Healthcare ServicesThe source does not say how they got in.SecurityWeek
- United States19 Oct 2026Computer Task Group, IncorporatedThe source does not say how they got in.Vermont Attorney General
- United States19 Oct 2026Citizens BankThe source does not say how they got in.California Attorney General
- United States19 Oct 2026STS Aviation GroupThe source does not say how they got in.California Attorney General
- United States18 Oct 2026Stitch Connect IncThe source does not say how they got in.California Attorney General
- United States17 Oct 2026Catawba CountyThe source does not say how they got in.Vermont Attorney General
- United States16 Oct 2026Johnson Investment CounselThe source does not say how they got in.Vermont Attorney General
Critical1 Aug 2026
MCBS
Healthcare · 1,260,000 records
1.26 million patients exposed in PEAR ransomware attack on medical billing company
1 Aug 2026
Critical1 Aug 2026
Coldcard/Coinkite
Finance · Records not stated
Bitcoin hardware wallet breach; over $100M worth of bitcoin stolen
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records stolen and leaked on dark web; police and government data exposed
1 Aug 2026
High1 Aug 2026
Clover Health
Healthcare · Records not stated
Data breach disclosed in securities filing; type of data exposed and record count unknown
1 Aug 2026
High1 Aug 2026
Chick-fil-A
Retail · Records not stated
Hackers accessed customer loyalty accounts using stolen usernames and passwords; names, emails exposed
1 Aug 2026
High1 Aug 2026
135,000 contact records stolen, published on dark web
Government · Records not stated
135,000 contact records stolen, published on dark web
1 Aug 2026
Critical1 Aug 2026
Instructure Canvas
Education · 275,000,000 records
ShinyHunters breach exposed 275 million records from 8,809 schools
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records stolen, data published on dark web
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Police, government and customer contact data leaked on dark web including names and emails
1 Aug 2026
High1 Aug 2026
Bol.com
Retail · Records not stated
Third-party warehousing logistics partner hacked, disrupting retailer operations
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records leaked on dark web by ExfilSquad; police and government contact details exposed
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised, SharePoint vulnerabilities suspected in on-premises Microsoft servers
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records stolen, police and government data leaked on dark web
1 Aug 2026
High1 Aug 2026
SharePoint vulnerabilities compromised 200 government accounts
Government · Records not stated
SharePoint vulnerabilities compromised 200 government accounts
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records and police/government contact details leaked on dark web by ExfilSquad
1 Aug 2026
High1 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack; hackers deleted stolen data after ransom gang confirmation
1 Aug 2026
Critical1 Aug 2026
Unlimited Technology Systems
Healthcare · 3,800,000 records
Hackers stole personal, medical, and health insurance information of 3.8 million people
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised; Microsoft SharePoint vulnerabilities suspected on on-premises servers
1 Aug 2026
Medium1 Aug 2026
Five Hong Kong Firms
Sector not stated · Records not stated
Orova ransomware breached five Hong Kong organizations in debut campaign
1 Aug 2026
High1 Aug 2026
bol.com
Retail · Records not stated
Third-party warehousing logistics partner hacked, affecting online retailer operations
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised via SharePoint vulnerabilities in Microsoft servers
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records of police and government officials leaked on dark web by ExfilSquad
1 Aug 2026
High1 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack resulted in data theft; hackers confirmed deletion of stolen data.
1 Aug 2026
High1 Aug 2026
Craneware
Healthcare · Records not stated
Healthcare software vendor suffered breach exposing customer data in supply-chain attack affecting healthcare industry.
1 Aug 2026
Were you affected?