Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,314
Disclosures in the tracker, all years
2,028
Of those, indexed in 2026
76
Added in October
21
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 21 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
72 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United States21 Oct 2026Critical infrastructure organizations worldwideHow they got in: stolen or reused passwords.BleepingComputer
- United States20 Oct 2026Conduent Business Services, LLCThe source does not say how they got in.HIPAA Journal
- United States20 Oct 2026Central Ohio Primary Care PhysiciansHow they got in: stolen or reused passwords.HIPAA Journal
- United States20 Oct 2026Educational Testing ServiceThe source does not say how they got in.The Record
- United States20 Oct 2026Chevy Chase ClubThe source does not say how they got in.Vermont Attorney General
- United States20 Oct 2026Paradigm Healthcare ServicesThe source does not say how they got in.SecurityWeek
- United States19 Oct 2026Computer Task Group, IncorporatedThe source does not say how they got in.Vermont Attorney General
- United States19 Oct 2026Citizens BankThe source does not say how they got in.California Attorney General
- United States19 Oct 2026STS Aviation GroupThe source does not say how they got in.California Attorney General
- United States18 Oct 2026Stitch Connect IncThe source does not say how they got in.California Attorney General
- United States17 Oct 2026Catawba CountyThe source does not say how they got in.Vermont Attorney General
- United States16 Oct 2026Johnson Investment CounselThe source does not say how they got in.Vermont Attorney General
Critical1 Aug 2026
MCBS
Healthcare · 1,200,000 records
Atlanta-based medical business management company data breach affected 1.2 million individuals
1 Aug 2026
High1 Aug 2026
Illuminate Education
Education · Records not stated
Data breach at Wisconsin-based edtech company resulted in FTC settlement and data deletion agreement
1 Aug 2026
High1 Aug 2026
Unnamed Law Firm
Legal · 13,000 records
Cyberattack on law firm exposed hospital records for approximately 13,000 patients in New Jersey
1 Aug 2026
High1 Aug 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Thousands of patient records stolen during major ransomware attack disrupting healthcare services
1 Aug 2026
High1 Aug 2026
Essex NHS Trust
Healthcare · 900,000 records
Thousands of patient records stolen in cyber attack; disclosure delayed over 6 months
1 Aug 2026
Critical1 Aug 2026
U.S. Civil Service/White House
Government · Records not stated
Thousands of civil servants' passwords exposed, including White House-linked accounts
1 Aug 2026
High1 Aug 2026
Sandhills Medical Foundation
Healthcare · 170,000 records
Ransomware breach disclosed affecting approximately 170,000 individuals
1 Aug 2026
Critical1 Aug 2026
Fairlife (Coca-Cola subsidiary)
Retail · Records not stated
Ransomware attack by Anubis leaked 1 TB of stolen data after ransom demand refused
1 Aug 2026
High1 Aug 2026
Legend Senior Care
Healthcare · Records not stated
Ransomware attack disclosed; affected senior care provider data
1 Aug 2026
High1 Aug 2026
Windward Life Care
Healthcare · Records not stated
Ransomware attack disclosed; affected senior care provider data
1 Aug 2026
Critical1 Aug 2026
Conduent
Government · Records not stated
Ransomware attack on government contractor exposed data affecting 25+ million people
1 Aug 2026
High1 Aug 2026
1 Aug 2026
Critical1 Aug 2026
Conduent Healthcare Systems
Healthcare · Records not stated
62M SSNs and medical records exposed
1 Aug 2026
High1 Aug 2026
KT Corp
Technology · Records not stated
Data breach confirmed with hefty fine issued by South Korea's Personal Information Protection Commission
1 Aug 2026
Critical1 Aug 2026
Fairlife (Coca-Cola subsidiary)
Retail · Records not stated
Ransomware attack by Anubis group, 1 TB of data leaked after ransom refused
1 Aug 2026
High1 Aug 2026
South Korea Foreign Ministry
Government · Records not stated
6000 diplomat records stolen over 10 months
1 Aug 2026
High1 Aug 2026
U.S. Government civil servants
Government · Records not stated
Thousands of civil servants' passwords exposed since early 2024, including White House credentials
1 Aug 2026
High1 Aug 2026
Gaming accounts
Technology · Records not stated
Over 11 million gaming account credentials exposed in 2024 data leaks
1 Aug 2026
High1 Aug 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
Data breach with cybersecurity vulnerabilities; fined €42 million for GDPR violations and lack of basic security controls
1 Aug 2026
High1 Aug 2026
Ransomware attack resulted in data
Education · Records not stated
Ransomware attack resulted in data leak including driver's license numbers and voter registration data
1 Aug 2026
Critical1 Aug 2026
Medical Computer Business Services
Healthcare · 1,300,000 records
1.3M patient health records leaked to dark web
1 Aug 2026
High1 Aug 2026
Years-long data breach of residents' private health-related information
Healthcare · Records not stated
Years-long data breach of residents' private health-related information
1 Aug 2026
High1 Aug 2026
Synnovis
Healthcare · 900,000 records
Ransomware attack on NHS trust in Essex stole thousands of patient records during major cyberattack
1 Aug 2026
High1 Aug 2026
Fairlife
Retail · Records not stated
Anubis ransomware leaked 1TB stolen data after Coca-Cola refused ransom
1 Aug 2026
Were you affected?