Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,314
Disclosures in the tracker, all years
2,028
Of those, indexed in 2026
76
Added in October
21
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 21 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
72 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United States21 Oct 2026Critical infrastructure organizations worldwideHow they got in: stolen or reused passwords.BleepingComputer
- United States20 Oct 2026Conduent Business Services, LLCThe source does not say how they got in.HIPAA Journal
- United States20 Oct 2026Central Ohio Primary Care PhysiciansHow they got in: stolen or reused passwords.HIPAA Journal
- United States20 Oct 2026Educational Testing ServiceThe source does not say how they got in.The Record
- United States20 Oct 2026Chevy Chase ClubThe source does not say how they got in.Vermont Attorney General
- United States20 Oct 2026Paradigm Healthcare ServicesThe source does not say how they got in.SecurityWeek
- United States19 Oct 2026Computer Task Group, IncorporatedThe source does not say how they got in.Vermont Attorney General
- United States19 Oct 2026Citizens BankThe source does not say how they got in.California Attorney General
- United States19 Oct 2026STS Aviation GroupThe source does not say how they got in.California Attorney General
- United States18 Oct 2026Stitch Connect IncThe source does not say how they got in.California Attorney General
- United States17 Oct 2026Catawba CountyThe source does not say how they got in.Vermont Attorney General
- United States16 Oct 2026Johnson Investment CounselThe source does not say how they got in.Vermont Attorney General
High1 Aug 2026
Organisation not named
Government · 135,000 records
The disclosure as indexed does not name the organisation.
Police and government contact details published on dark web; 135K records claimed
1 Aug 2026
High1 Aug 2026
Multiple Hong Kong firms
Sector not stated · Records not stated
Orova ransomware breached five Hong Kong organizations; part of 24-victim campaign across six countries
1 Aug 2026
Medium1 Aug 2026
Stade Français
Sector not stated · Records not stated
French rugby club experienced cyberattack with data leak; systems restored from backups
1 Aug 2026
High1 Aug 2026
NHS Tayside
Healthcare · 900,000 records
Unauthorized access to medical records of deceased 9-year-old girl after staff improper access
1 Aug 2026
High1 Aug 2026
CEVA Logistics
Sector not stated · Records not stated
Data breach affecting Ajax football club, ING bank, and Ace & Tate eyewear chain
1 Aug 2026
High1 Aug 2026
200 accounts compromised through on-premises Microsoft SharePoint vulnerabilities
Government · Records not stated
200 accounts compromised through on-premises Microsoft SharePoint vulnerabilities
1 Aug 2026
High1 Aug 2026
Data theft
Government · Records not stated
Data theft confirmed; 135K contact records leaked on dark web by ExfilSquad
1 Aug 2026
Critical1 Aug 2026
Multiple water utilities
Government · Records not stated
Operational technology systems targeted in cyberattacks across at least 12 U.S. states
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised; anomalies detected in on-premises Microsoft servers, possibly via SharePoint vulnerabilities
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records stolen and leaked on dark web; police and government contact details exposed
1 Aug 2026
Critical1 Aug 2026
Victorian Courts
Government · Records not stated
Hackers leaked sensitive court data to dark web including family violence intervention details
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised in on-premises Microsoft servers, likely due to SharePoint vulnerabilities
1 Aug 2026
High1 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack; stolen data deletion confirmed by hacker group
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135k contact records stolen; police and government contact details leaked on dark web
1 Aug 2026
High1 Aug 2026
Beacon CRM
Sector not stated · Records not stated
Software firm breach affected charities; Charity Commission planning guidance
1 Aug 2026
Critical1 Aug 2026
Victorian Court System
Government · Records not stated
Sensitive data including family violence intervention orders leaked to dark web
1 Aug 2026
High1 Aug 2026
AnMed
Healthcare · Records not stated
Nonprofit health system cyberattack forced facility closures and prolonged recovery
1 Aug 2026
Critical1 Aug 2026
Multiple US Financial Firms
Finance · Records not stated
Hackers breaking into large U.S. financial firms to steal sensitive data and extort victims
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised via anomalies detected in on-premises Microsoft servers
1 Aug 2026
Critical1 Aug 2026
Snowflake
Technology · 165,000,000 records
Credential-based cloud intrusion exposing over 100 million records (2024-2026)
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records of police and government leaked on dark web by ExfilSquad
1 Aug 2026
High1 Aug 2026
Exact Sciences/Abbott
Healthcare · Records not stated
Personal and confidential information from at-home diagnostic test users exposed
1 Aug 2026
Critical1 Aug 2026
Ernst & Young
Finance · Records not stated
Hackers stole names, addresses, Social Security numbers, and financial information from third-party platform
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised, likely through SharePoint vulnerabilities in on-premises Microsoft servers
1 Aug 2026
Were you affected?