Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,621
Disclosures in the tracker, all years
2,126
Of those, indexed in 2026
54
Added in November
26
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 8 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
78 incidents from 10 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- Canada6 Nov 2026Air CreebecThe source does not say how they got in.CTV News
- Canada5 Nov 2026Burnaby School DistrictThe source does not say how they got in.CBC News
- Canada3 Nov 2026Central Okanagan School DistrictThe source does not say how they got in.CBC News
- Canada31 Oct 2026ChainalysisHow they got in: automated AI tools that work through many organizations at once.BleepingComputer
- Canada29 Oct 2026McCarthy Tétrault (with Davies also reporting a breach)The source does not say how they got in.The Globe and Mail
High1 Jan 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
Data regulator fined $42-48 million for cybersecurity vulnerabilities contributing to 2024 data breach
1 Jan 2026
Medium1 Jan 2026
FirstClass Travel Agency
Sector not stated · Records not stated
Sydney-based travel agency; threat actor on underground forum alleged customer records breach
1 Jan 2026
High1 Jan 2026
Multi-year data breach of residents' private health-related information
Government · Records not stated
Multi-year data breach of residents' private health-related information
1 Jan 2026
High1 Jan 2026
French Telecom Subsidiaries
Technology · Records not stated
Data breach with inadequate security controls resulted in €42M GDPR fines from French data regulator
1 Jan 2026
High1 Jan 2026
Multi-year data breach
Healthcare · Records not stated
Multi-year data breach exposed residents' private health-related information
1 Jan 2026
High1 Jan 2026
French Telco Subsidiaries
Technology · Records not stated
Data regulator fined subsidiaries €42 million for cybersecurity vulnerabilities contributing to 2024 breach
1 Jan 2026
Critical1 Jan 2026
Armenia Government
Government · Records not stated
Alleged sale of 8M government records on hacker forum; authorities launched investigation
1 Jan 2026
High1 Jan 2026
Tribeca Film Festival
Sector not stated · 666,000 records
Unprotected database exposed 666,000 records including celebrity contact information with no password or encryption
1 Jan 2026
Critical1 Jan 2026
Qantas
Sector not stated · 5,670,000 records
Vishing attack exposed 5.67 million customer records including personal and travel data
1 Jan 2026
High1 Jan 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Yearslong data breach of residents' private health-related information reported
1 Jan 2026
Critical1 Jan 2026
Armenian Government
Government · Records not stated
Hackers offered 8 million government records for sale on hacker forum
1 Jan 2026
High1 Jan 2026
KT Corp
Technology · Records not stated
Data breach resulting in significant fine from South Korea's Personal Information Protection Commission
1 Jan 2026
High1 Jan 2026
FirstClass
Retail · Records not stated
Australian travel agency - customer records allegedly breached, threat actor posted on underground forums.
1 Jan 2026
High1 Jan 2026
Yearslong data breach of residents' private health-related information
Government · Records not stated
Yearslong data breach of residents' private health-related information
1 Jan 2026
High1 Jan 2026
Xsolis
Healthcare · Records not stated
Healthcare AI vendor breach in January 2026 exposed patient records from client healthcare organizations
1 Jan 2026
High27 Dec 2025
WIRED
Technology · 2,364,431 records
2,364,431 records exposed, Dates of birth, Display names, Email addresses, Genders and 4 more
27 Dec 2025
High26 Dec 2025
Utair
Government · 401,400 records
401,400 records exposed, Dates of birth, Email addresses, Genders, Loyalty program details and 4 more
26 Dec 2025
Critical24 Dec 2025
Медицинская лаборатория Гемотест (Gemotest)
Healthcare · 6,341,495 records
6,341,495 records exposed, Dates of birth, Email addresses, Genders, Government issued IDs and 4 more
24 Dec 2025
High18 Dec 2025
The Botting Network
Technology · 96,320 records
96,320 records exposed, Dates of birth, Email addresses, Passwords, Usernames
18 Dec 2025
Medium18 Dec 2025
AUTOSUR
Technology · 487,226 records
487,226 records exposed, Email addresses, Names, Phone numbers, Physical addresses and 3 more
18 Dec 2025
High17 Dec 2025
Web Hosting Talk
Technology · 515,149 records
515,149 records exposed, Email addresses, IP addresses, Passwords, Usernames
17 Dec 2025
High6 Dec 2025
KinoKong
Technology · 817,808 records
817,808 records exposed, Email addresses, IP addresses, Names, Passwords and 1 more
6 Dec 2025
High1 Dec 2025
NHS England Tech Provider
Healthcare · 900,000 records
Tech provider confirms data breach
1 Dec 2025
High1 Dec 2025
Mixpanel
Technology · Records not stated
Data breach at analytics platform
1 Dec 2025
Were you affected?