Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,558
Disclosures in the tracker, all years
2,108
Of those, indexed in 2026
25
Added in November
32
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 5 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
77 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- Canada31 Oct 2026ChainalysisHow they got in: automated AI tools that work through many organizations at once.BleepingComputer
- Canada29 Oct 2026McCarthy Tétrault (with Davies also reporting a breach)The source does not say how they got in.The Globe and Mail
- Canada23 Oct 2026Crime Stoppers programs in OntarioHow they got in: a supplier or vendor that was compromised first.Global News
- Canada22 Oct 2026Toronto Crime StoppersHow they got in: a supplier or vendor that was compromised first.Global News
High15 Aug 2020
Canada Revenue Agency (CRA)
Government · 13,000 records
13,000 accounts compromised via credential stuffing, GCKey and CRA MyAccount portals
15 Aug 2020
Medium15 Aug 2020
15 Aug 2020
High15 Aug 2020
Brown-Forman (Jack Daniels)
Sector not stated · Records not stated
REvil ransomware stole 1TB of internal data
15 Aug 2020
Critical15 Aug 2020
Carnival Corporation
Technology · 1,500,000 records
1.5M customer records exposed in ransomware affecting cruise lines
15 Aug 2020
High14 Aug 2020
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
9,041 GCKey credentials used in credential stuffing, RCMP, CRA, IRCC accounts accessed
14 Aug 2020
High14 Aug 2020
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
9,041 GCKey credentials used in credential stuffing, RCMP, CRA, IRCC accounts accessed
14 Aug 2020
High14 Aug 2020
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
9,041 GCKey credentials used in credential stuffing, RCMP, CRA, IRCC accounts accessed
14 Aug 2020
High14 Aug 2020
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
9,041 GCKey credentials used in credential stuffing, RCMP, CRA, IRCC accounts accessed
14 Aug 2020
High14 Aug 2020
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
9,041 GCKey credentials used in credential stuffing, RCMP, CRA, IRCC accounts accessed
14 Aug 2020
High14 Aug 2020
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
9,041 GCKey credentials used in credential stuffing, RCMP, CRA, IRCC accounts accessed
14 Aug 2020
High14 Aug 2020
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
9,041 GCKey credentials used in credential stuffing, RCMP, CRA, IRCC accounts accessed
14 Aug 2020
High14 Aug 2020
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
9,041 GCKey credentials used in credential stuffing, RCMP, CRA, IRCC accounts accessed
14 Aug 2020
High14 Aug 2020
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
9,041 GCKey credentials used in credential stuffing, RCMP, CRA, IRCC accounts accessed
14 Aug 2020
High14 Aug 2020
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
9,041 GCKey credentials used in credential stuffing, RCMP, CRA, IRCC accounts accessed
14 Aug 2020
High14 Aug 2020
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
9,041 GCKey credentials used in credential stuffing, RCMP, CRA, IRCC accounts accessed
14 Aug 2020
High14 Aug 2020
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
9,041 GCKey credentials used in credential stuffing, RCMP, CRA, IRCC accounts accessed
14 Aug 2020
High14 Aug 2020
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
9,041 GCKey credentials used in credential stuffing, RCMP, CRA, IRCC accounts accessed
14 Aug 2020
High14 Aug 2020
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
9,041 GCKey credentials used in credential stuffing, RCMP, CRA, IRCC accounts accessed
14 Aug 2020
High14 Aug 2020
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
9,041 GCKey credentials used in credential stuffing, RCMP, CRA, IRCC accounts accessed
14 Aug 2020
High14 Aug 2020
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
9,041 GCKey credentials used in credential stuffing, RCMP, CRA, IRCC accounts accessed
14 Aug 2020
High14 Aug 2020
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
9,041 GCKey credentials used in credential stuffing, RCMP, CRA, IRCC accounts accessed
14 Aug 2020
High14 Aug 2020
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
9,041 GCKey credentials used in credential stuffing, RCMP, CRA, IRCC accounts accessed
14 Aug 2020
High14 Aug 2020
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
9,041 GCKey credentials used in credential stuffing, RCMP, CRA, IRCC accounts accessed
14 Aug 2020
High14 Aug 2020
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
9,041 GCKey credentials used in credential stuffing, RCMP, CRA, IRCC accounts accessed
14 Aug 2020
Were you affected?