Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,383
Disclosures in the tracker, all years
2,097
Of those, indexed in 2026
14
Added in November
25
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 4 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
77 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- Denmark27 Oct 2026ENGIEThe source does not say how they got in.BleepingComputer
High1 Jul 2026
Hugging Face
Technology · Records not stated
Breach affected internal datasets and credentials, users urged to rotate tokens
1 Jul 2026
Critical1 Jul 2026
Accenture
Technology · Records not stated
Data breach involving 35GB of internal data including source code and credentials
1 Jul 2026
High1 Jul 2026
Coca-Cola (Fairlife)
Retail · Records not stated
Ransomware attack shut down dairy operations, disclosed to SEC
1 Jul 2026
High1 Jul 2026
Fairlife
Retail · Records not stated
Ransomware attack on Coca-Cola's dairy unit affected production-related systems
1 Jul 2026
High1 Jul 2026
River Bank & Trust
Finance · Records not stated
Ransomware attack resulted in data theft; hackers confirmed deletion of stolen data
1 Jul 2026
High1 Jul 2026
Chick-fil-A
Retail · Records not stated
Hackers accessed customer loyalty accounts using stolen usernames and passwords
1 Jul 2026
High1 Jul 2026
Clover Health
Healthcare · Records not stated
Health insurer disclosed data breach; data type and victim count not yet determined
1 Jul 2026
High1 Jul 2026
Craneware
Healthcare · Records not stated
Hospital software vendor breach exposed healthcare customer data through supply-chain attack
1 Jul 2026
High1 Jul 2026
River Financial Corporation
Finance · Records not stated
Ransomware attack; hackers deleted stolen data after ransom demand; confirmed data deletion
1 Jul 2026
Critical1 Jul 2026
Instructure (Canvas platform)
Education · Records not stated
Supply chain breach generating majority of 2026 breach notices
1 Jul 2026
High1 Jul 2026
Ransomware attack disrupted systems operations
Sector not stated · Records not stated
Ransomware attack disrupted systems operations
1 Jul 2026
Critical1 Jul 2026
Comcast Xfinity
Technology · 35,000,000 records
Cyberattack exposes personal information of Xfinity customers; $117.5M settlement reached
1 Jul 2026
High1 Jul 2026
LVM (Latvian State Forestry)
Sector not stated · Records not stated
Ransomware attack, systems still being restored weeks after incident
1 Jul 2026
High1 Jul 2026
DHS (Homeland Security)
Government · Records not stated
Network intrusion on Homeland Security Information Network supporting World Cup operations confirmed
1 Jul 2026
High1 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Network intrusion on Homeland Security Information Network supporting World Cup infrastructure
1 Jul 2026
High1 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack attributed to foreign financially motivated threat group
1 Jul 2026
High1 Jul 2026
LVM (Latvian Forestry)
Sector not stated · Records not stated
Ransomware attack by foreign financially motivated group disrupted forestry operations
1 Jul 2026
High1 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack attributed to foreign financially motivated group; systems restoration ongoing
1 Jul 2026
High1 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Network intrusion on Homeland Security Information Network confirmed after being ruled false positive twice
1 Jul 2026
High1 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Network intrusion on Homeland Security Information Network confirmed after twice ruled false positive
1 Jul 2026
High1 Jul 2026
LVM (Latvian Forestry Company)
Sector not stated · Records not stated
Ransomware attack attributed to foreign financially motivated group
1 Jul 2026
High1 Jul 2026
LVM (Latvian forestry company)
Sector not stated · Records not stated
Ransomware attack by foreign financially motivated group; systems still being restored
1 Jul 2026
High1 Jul 2026
Network intrusion on Homeland Security Information Network
Government · Records not stated
Network intrusion on Homeland Security Information Network confirmed after two false positive rulings
1 Jul 2026
Critical1 Jul 2026
FortiBleed/Fortinet
Technology · Records not stated
73,932 FortiGate firewall administrative and VPN credentials exposed via credential exposure campaign
1 Jul 2026
Were you affected?