Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,383
Disclosures in the tracker, all years
2,097
Of those, indexed in 2026
14
Added in November
25
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 4 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
77 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- Canada31 Oct 2026ChainalysisHow they got in: automated AI tools that work through many organizations at once.BleepingComputer
- Canada29 Oct 2026McCarthy Tétrault (with Davies also reporting a breach)The source does not say how they got in.The Globe and Mail
- Canada23 Oct 2026Crime Stoppers programs in OntarioHow they got in: a supplier or vendor that was compromised first.Global News
- Canada22 Oct 2026Toronto Crime StoppersHow they got in: a supplier or vendor that was compromised first.Global News
High1 Aug 2026
Law firm (breached)
Legal · 13,000 records
Cyberattack exposed hospital records on approximately 13,000 patients in New Jersey
1 Aug 2026
High1 Aug 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records confirmed stolen during major ransomware cyberattack
1 Aug 2026
High1 Aug 2026
Home Depot
Retail · Records not stated
Exposed private GitHub token gave unauthorized access to internal systems for approximately one year
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
2025 network breach exposed sensitive healthcare billing data affecting 1.26 million people
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Thousands of patient records stolen in major ransomware attack disrupting healthcare services
1 Aug 2026
High1 Aug 2026
Home Depot
Retail · Records not stated
Exposed private GitHub token gave unauthorized access to private repos and internal systems for a year
1 Aug 2026
Critical1 Aug 2026
Spectrum (Charter)
Technology · Records not stated
Data breach exposed 4.9 million confirmed accounts, 42 million claimed by attackers
1 Aug 2026
Critical1 Aug 2026
1 Aug 2026
High1 Aug 2026
Estée Lauder
Retail · Records not stated
Employee PII including SSNs and payroll data exposed
1 Aug 2026
Critical1 Aug 2026
1 Aug 2026
High1 Aug 2026
Synnovis NHS Trust
Healthcare · 900,000 records
Ransomware attack stole thousands of patient records from Essex NHS trust
1 Aug 2026
High1 Aug 2026
Sandhills Medical Foundation
Healthcare · 170,000 records
Ransomware breach affected approximately 170,000 individuals in South Carolina
1 Aug 2026
Critical1 Aug 2026
Conduent
Government · 25,000,000 records
Ransomware attack on government contractor exposed data of at least 25 million people
1 Aug 2026
Critical1 Aug 2026
ANTS (French ID agency)
Government · 19,000,000 records
Cyberattack exposed 19 million records including personal data linked to identity documents
1 Aug 2026
Critical1 Aug 2026
1 Aug 2026
Critical1 Aug 2026
1 Aug 2026
Critical1 Aug 2026
Meta
Technology · Records not stated
2019 breach exposed hundreds of millions of Facebook passwords, company fined $101.5M
1 Aug 2026
Medium1 Aug 2026
FirstClass
Sector not stated · Records not stated
Australian travel agency customer records compromised in alleged data breach
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Healthcare · 1,200,000 records
The disclosure as indexed does not name the organisation.
2025 ransomware attack exposed personal data of 1.2 million individuals
1 Aug 2026
Critical1 Aug 2026
Marquis
Finance · 672,000 records
Ransomware attack stealing 672K records including names, addresses, card numbers from fintech firm
1 Aug 2026
High1 Aug 2026
Law firm (New Jersey)
Healthcare · Records not stated
13K hospital patient records exposed in cyberattack
1 Aug 2026
High1 Aug 2026
Essex NHS Trust
Healthcare · 900,000 records
Thousands of patient records stolen in cyber attack, disclosed 6+ months after notification
1 Aug 2026
Critical1 Aug 2026
Otelier
Retail · Records not stated
Data on 500,000+ hotel guests exposed including customers from Marriott, Hilton, Hyatt brands
1 Aug 2026
High1 Aug 2026
New Jersey Law Firm
Legal · 13,000 records
Cyberattack exposed hospital records for nearly 13,000 patients in New Jersey
1 Aug 2026
Were you affected?