Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,421
Disclosures in the tracker, all years
2,136
Of those, indexed in 2026
62
Added in November
24
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 9 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
78 incidents from 10 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- Canada6 Nov 2026Air CreebecThe source does not say how they got in.CTV News
- Canada5 Nov 2026Burnaby School DistrictThe source does not say how they got in.CBC News
- Canada3 Nov 2026Central Okanagan School DistrictThe source does not say how they got in.CBC News
- Canada31 Oct 2026ChainalysisHow they got in: automated AI tools that work through many organizations at once.BleepingComputer
- Canada29 Oct 2026McCarthy Tétrault (with Davies also reporting a breach)The source does not say how they got in.The Globe and Mail
Critical1 Sep 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Cybercriminals stole private data of potentially millions of customers from luxury fashion labels' parent company
1 Sep 2025
High1 Sep 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Hackers stole private data of customers from parent company's luxury fashion brands
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Potentially millions of customers' details stolen in cyberattack on parent company
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Finance · 160,000,000 records
The disclosure as indexed does not name the organisation.
ShinyHunters exfiltrated over 160 million records from financial databases
1 Sep 2025
High1 Sep 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Hackers stole private data of customers from luxury fashion brands owned by parent company Kering
1 Sep 2025
Critical1 Sep 2025
Kering (Gucci, Balenciaga, McQueen)
Retail · Records not stated
Cybercriminals stole private data of millions of customers from luxury fashion brands' parent company
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Cyberattack stealing private data of potentially millions of customers
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Hackers stole private data of millions of customers from luxury brand parent company
1 Sep 2025
Critical1 Sep 2025
Cyberattack
Retail · Records not stated
Cyberattack exposed private data of potentially millions of customers across luxury fashion labels
1 Sep 2025
Critical1 Sep 2025
Kering
Retail · Records not stated
Cyberattack exposed personal data of potentially millions of customers of Gucci, Balenciaga, and Alexander McQueen
1 Sep 2025
Critical1 Sep 2025
ShinyHunters exfiltrated 160M+ records from financial databases
Finance · 160,000,000 records
ShinyHunters exfiltrated 160M+ records from financial databases
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Finance · 160,000,000 records
The disclosure as indexed does not name the organisation.
160M+ records exfiltrated by ShinyHunters from Vietnam's financial system databases
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Finance · 160,000,000 records
The disclosure as indexed does not name the organisation.
Over 160 million records exfiltrated from CIC databases by ShinyHunters attackers targeting Vietnam's financial system
1 Sep 2025
High1 Sep 2025
Estée Lauder
Retail · Records not stated
Data breach from Oracle EBS exposure leaked personal customer data; disclosed 10 months after occurrence
1 Sep 2025
Critical1 Sep 2025
RedNovember (Multiple Organizations)
Government · Records not stated
Chinese hackers breached critical infrastructure globally including defense contractors, government agencies, and manufacturers using VPN/firewall exploits
1 Sep 2025
High1 Sep 2025
KillSec attack on MedicSolution
Healthcare · Records not stated
KillSec ransomware group attacked MedicSolution, a healthcare software solutions provider in Brazil
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Finance · 160,000,000 records
The disclosure as indexed does not name the organisation.
ShinyHunters exfiltrated over 160 million records from Vietnamese financial databases
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Government · 160,000,000 records
The disclosure as indexed does not name the organisation.
ShinyHunters exfiltrated 160 million records from Vietnam's financial system
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Finance · 160,000,000 records
The disclosure as indexed does not name the organisation.
ShinyHunters exfiltrated over 160 million records from CIC databases in Vietnam's financial system
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Finance · 160,000,000 records
The disclosure as indexed does not name the organisation.
ShinyHunters exfiltrated over 160 million records from National Credit Information Center databases
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
ShinyHunters exfiltrated 160+ million records from Vietnam's financial system databases
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Finance · 160,000,000 records
The disclosure as indexed does not name the organisation.
ShinyHunters exfiltrated 160 million records from Vietnam's financial system databases
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Finance · 160,000,000 records
The disclosure as indexed does not name the organisation.
ShinyHunters exfiltrated 160 million records from Vietnamese financial system databases
1 Sep 2025
High1 Sep 2025
Federal Agency
Government · Records not stated
Breach via critical GeoServer flaw CVE-2024-36401 exploitation
1 Sep 2025
Were you affected?