Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,314
Disclosures in the tracker, all years
2,028
Of those, indexed in 2026
76
Added in October
21
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 21 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
72 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United States21 Oct 2026Critical infrastructure organizations worldwideHow they got in: stolen or reused passwords.BleepingComputer
- United States20 Oct 2026Conduent Business Services, LLCThe source does not say how they got in.HIPAA Journal
- United States20 Oct 2026Central Ohio Primary Care PhysiciansHow they got in: stolen or reused passwords.HIPAA Journal
- United States20 Oct 2026Educational Testing ServiceThe source does not say how they got in.The Record
- United States20 Oct 2026Chevy Chase ClubThe source does not say how they got in.Vermont Attorney General
- United States20 Oct 2026Paradigm Healthcare ServicesThe source does not say how they got in.SecurityWeek
- United States19 Oct 2026Computer Task Group, IncorporatedThe source does not say how they got in.Vermont Attorney General
- United States19 Oct 2026Citizens BankThe source does not say how they got in.California Attorney General
- United States19 Oct 2026STS Aviation GroupThe source does not say how they got in.California Attorney General
- United States18 Oct 2026Stitch Connect IncThe source does not say how they got in.California Attorney General
- United States17 Oct 2026Catawba CountyThe source does not say how they got in.Vermont Attorney General
- United States16 Oct 2026Johnson Investment CounselThe source does not say how they got in.Vermont Attorney General
Critical8 May 2020
Organisation not named
Legal · Records not stated
The disclosure as indexed does not name the organisation.
REvil ransomware stole 756GB of celebrity and corporate client data
8 May 2020
Critical8 May 2020
Organisation not named
Legal · Records not stated
The disclosure as indexed does not name the organisation.
REvil ransomware stole 756GB of celebrity and corporate client data
8 May 2020
Critical8 May 2020
Organisation not named
Legal · Records not stated
The disclosure as indexed does not name the organisation.
REvil ransomware stole 756GB of celebrity and corporate client data
8 May 2020
Critical8 May 2020
Organisation not named
Legal · Records not stated
The disclosure as indexed does not name the organisation.
REvil ransomware stole 756GB of celebrity and corporate client data
8 May 2020
Critical8 May 2020
Organisation not named
Legal · Records not stated
The disclosure as indexed does not name the organisation.
REvil ransomware stole 756GB of celebrity and corporate client data
8 May 2020
Critical8 May 2020
Organisation not named
Legal · Records not stated
The disclosure as indexed does not name the organisation.
REvil ransomware stole 756GB of celebrity and corporate client data
8 May 2020
Critical8 May 2020
Organisation not named
Legal · Records not stated
The disclosure as indexed does not name the organisation.
REvil ransomware stole 756GB of celebrity and corporate client data
8 May 2020
Critical8 May 2020
Organisation not named
Legal · Records not stated
The disclosure as indexed does not name the organisation.
REvil ransomware stole 756GB of celebrity and corporate client data
8 May 2020
Critical8 May 2020
Organisation not named
Legal · Records not stated
The disclosure as indexed does not name the organisation.
REvil ransomware stole 756GB of celebrity and corporate client data
8 May 2020
Critical8 May 2020
Organisation not named
Legal · Records not stated
The disclosure as indexed does not name the organisation.
REvil ransomware stole 756GB of celebrity and corporate client data
8 May 2020
Critical8 May 2020
Organisation not named
Legal · Records not stated
The disclosure as indexed does not name the organisation.
REvil ransomware stole 756GB of celebrity and corporate client data
8 May 2020
Critical8 May 2020
Organisation not named
Legal · Records not stated
The disclosure as indexed does not name the organisation.
REvil ransomware stole 756GB of celebrity and corporate client data
8 May 2020
High8 May 2020
Ulmon
Retail · 777,769 records
777,769 records exposed, Bios, Email addresses, Names, Passwords and 2 more
8 May 2020
Critical8 May 2020
Organisation not named
Legal · Records not stated
The disclosure as indexed does not name the organisation.
REvil ransomware stole 756GB of celebrity and corporate client data
8 May 2020
High7 May 2020
Unacademy (India)
Education · 22,000,000 records
22M user records stolen from Indian edtech unicorn, emails, passwords, usernames
7 May 2020
Critical7 May 2020
7 May 2020
Critical5 May 2020
CAM4 (adult site)
Technology · 10,880,000,000 records
10.88B records exposed in Elasticsearch misconfiguration
5 May 2020
High4 May 2020
Elanic
Retail · 2,325,283 records
2,325,283 records exposed, Email addresses, Geographic locations, Usernames
4 May 2020
Critical4 May 2020
Door Dash (2020)
Retail · 4,900,000 records
4.9M user records exposed in third-party vendor breach
4 May 2020
Critical3 May 2020
TaiLieu
Education · 7,327,477 records
7,327,477 records exposed, Dates of birth, Email addresses, Genders, Geographic locations and 4 more
3 May 2020
Critical3 May 2020
3 May 2020
Critical2 May 2020
Tokopedia
Retail · 71,443,698 records
71,443,698 records exposed, Dates of birth, Email addresses, Genders, Names and 1 more
2 May 2020
Critical2 May 2020
Tokopedia (Indonesia)
Retail · 91,000,000 records
91M user records stolen from Indonesia's largest e-commerce platform
2 May 2020
Critical2 May 2020
2 May 2020
Were you affected?