Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,405
Disclosures in the tracker, all years
2,119
Of those, indexed in 2026
40
Added in November
41
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 6 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
77 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- Japan29 Oct 2026Japan AirlinesHow they got in: a supplier or vendor that was compromised first.BleepingComputer
- Japan29 Oct 2026Sony Network Communications (So-net / Plala ISP)The source does not say how they got in.SecurityWeek
High1 Jun 2026
FirstClass (Australian Travel Agency)
Sector not stated · Records not stated
Customer records allegedly breached by threat actor operating on underground hacking forums
1 Jun 2026
Critical1 Jun 2026
Elasticsearch Database (Infostealer Logs)
Technology · Records not stated
Publicly exposed database leaked 24 billion stolen credentials, one of largest infostealer compilations
1 Jun 2026
High1 Jun 2026
TrueConf
Technology · Records not stated
Server breach exploited by Head Mare group to trojanize client installers with backdoors
1 Jun 2026
Critical1 Jun 2026
Essex NHS Trust (Synnovis)
Healthcare · 900,000 records
Thousands of patient records stolen in ransomware cyberattack on NHS trust in Essex
1 Jun 2026
Critical1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen in ransomware attack affecting Essex NHS trust
1 Jun 2026
Critical1 Jun 2026
Elasticsearch (Infostealer Database)
Technology · Records not stated
Publicly exposed Elasticsearch database leaked 24 billion stolen credentials from infostealer logs
1 Jun 2026
High1 Jun 2026
Synnovis NHS Trust
Healthcare · 900,000 records
Ransomware attack stole thousands of NHS patient records from Essex healthcare trust
1 Jun 2026
High1 Jun 2026
Coca-Cola fairlife
Retail · Records not stated
Ransomware attack shut down dairy operations
1 Jun 2026
High1 Jun 2026
Thousands of NHS patient records
Healthcare · 900,000 records
Thousands of NHS patient records confirmed stolen during ransomware attack disrupting healthcare services
1 Jun 2026
Critical1 Jun 2026
Thousands of patient records stolen in ransomware cyberattack
Healthcare · Records not stated
Thousands of patient records stolen in ransomware cyberattack
1 Jun 2026
High1 Jun 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records and police/government data leaked on dark web
1 Jun 2026
Critical1 Jun 2026
Synnovis (NHS)
Healthcare · 900,000 records
Thousands of NHS patient records stolen in major ransomware attack affecting healthcare services
1 Jun 2026
Critical1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records confirmed stolen in ransomware attack
1 Jun 2026
Critical1 Jun 2026
Thousands of NHS patient records
Healthcare · 900,000 records
Thousands of NHS patient records confirmed stolen during major ransomware attack disrupting healthcare
1 Jun 2026
Medium1 Jun 2026
Ecopetrol
Sector not stated · 3,300 records
Cyberattack exposed data tied to approximately 3,300 user accounts
1 Jun 2026
Critical1 Jun 2026
Synnovis NHS
Healthcare · 900,000 records
Thousands of NHS patient records stolen in ransomware cyberattack
1 Jun 2026
Medium1 Jun 2026
Levi Strauss
Retail · Records not stated
Hackers gained access to three workers' company-issued computers via social engineering
1 Jun 2026
High1 Jun 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records leaked on dark web; police and government contact details exposed
1 Jun 2026
Critical1 Jun 2026
Synnovis/Essex NHS
Healthcare · 900,000 records
Thousands of patient records stolen in major ransomware cyberattack on NHS trust in Essex, England
1 Jun 2026
Critical1 Jun 2026
Thousands of patient records
Healthcare · Records not stated
Thousands of patient records confirmed stolen in ransomware attack that disrupted healthcare services
1 Jun 2026
Critical1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen in ransomware attack
1 Jun 2026
Critical1 Jun 2026
Fortinet (FortiBleed campaign)
Technology · Records not stated
73,000+ Fortinet FortiGate firewalls compromised with admin credentials and VPN data exposed
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Thousands of patient records stolen during major ransomware attack disrupting healthcare services
1 Jun 2026
Critical1 Jun 2026
Elasticsearch Database (unnamed user)
Technology · Records not stated
Publicly exposed database leaked 24 billion stolen credentials in one of largest infostealer compilations
1 Jun 2026
Were you affected?