Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,383
Disclosures in the tracker, all years
2,097
Of those, indexed in 2026
14
Added in November
25
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 4 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
78 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- Japan29 Oct 2026Japan AirlinesHow they got in: a supplier or vendor that was compromised first.BleepingComputer
- Japan29 Oct 2026Sony Network Communications (So-net / Plala ISP)The source does not say how they got in.SecurityWeek
- Japan22 Oct 2026CapcomThe source does not say how they got in.BleepingComputer
High1 Aug 2026
Unpatched CMS and missed
Government · Records not stated
Unpatched CMS and missed alerts led to sensitive data leak
1 Aug 2026
High1 Aug 2026
Coca-Cola (Fairlife)
Retail · Records not stated
Ransomware attack shut down dairy operations; $4 billion brand impacted
1 Aug 2026
High1 Aug 2026
Valve/CEVA Logistics
Technology · Records not stated
Data breach at CEVA Logistics (Valve's European logistics partner) exposed customer names, addresses, and order data
1 Aug 2026
High1 Aug 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
Hackers hit CEVA Logistics shipping partner, exposing names and addresses of Steam hardware buyers in Europe
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Security vulnerabilities led to sensitive data leak; uncertain if data was exfiltrated
1 Aug 2026
High1 Aug 2026
Valve (CEVA Logistics partner)
Technology · Records not stated
European logistics partner breached; customer names, addresses, order data exposed for Steam hardware
1 Aug 2026
Critical1 Aug 2026
LiteLLM AI
Technology · Records not stated
Supply chain breach exposed 2,500+ companies and 434,000 CI/CD pipelines with credentials and sensitive data
1 Aug 2026
High1 Aug 2026
Unpatched CMS led to sensitive data
Government · Records not stated
Unpatched CMS led to sensitive data leak from criminal records office
1 Aug 2026
Critical1 Aug 2026
Thailand Digital Ministry/Government
Government · Records not stated
221 million login records exposed, prompting MFA mandate push
1 Aug 2026
Critical1 Aug 2026
Coca-Cola Dairy (Sprite/Minute Maid)
Retail · Records not stated
Ransomware attack shut down Coca-Cola's $4 billion dairy brand operations
1 Aug 2026
Critical1 Aug 2026
LiteLLM (AI Supply Chain)
Technology · Records not stated
AI supply-chain attack exposed 2,500+ companies and 434,000 CI/CD pipelines; terabytes of credentials leaked
1 Aug 2026
High1 Aug 2026
fairlife (Coca-Cola)
Retail · Records not stated
Ransomware attack shut down dairy operations; data exposure details not specified
1 Aug 2026
High1 Aug 2026
Valve / CEVA Logistics
Technology · Records not stated
Steam hardware shipping partner breach exposed customer names, addresses, and order data in Europe
1 Aug 2026
High1 Aug 2026
Coca-Cola Fairlife
Retail · Records not stated
Ransomware attack shut down dairy operations resulting in $4B brand disruption
1 Aug 2026
High1 Aug 2026
Sensitive criminal records data
Government · Records not stated
Sensitive criminal records data leaked due to woeful security and unpatched CMS
1 Aug 2026
High1 Aug 2026
Simian
Retail · Records not stated
Groningen-based printing company; hackers accessed Dutch credit card data affecting customers in Netherlands and Belgium
1 Aug 2026
Medium1 Aug 2026
Trezor
Technology · Records not stated
Customer records exposed for 13,689 buyers in phishing attack
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Insecure CMS led to sensitive data leak from criminal records office
1 Aug 2026
High1 Aug 2026
Fairlife (Coca-Cola)
Retail · Records not stated
Ransomware attack shut down dairy operations, data exposure from attack
1 Aug 2026
High1 Aug 2026
CEVA Logistics/Steam
Technology · Records not stated
CEVA Logistics hack exposed Steam customer names and addresses of European hardware buyers
1 Aug 2026
Critical1 Aug 2026
Unpatched CMS led to sensitive criminal records data
Government · Records not stated
Unpatched CMS led to sensitive criminal records data leak
1 Aug 2026
High1 Aug 2026
Coca-Cola Dairy (Coca-Cola)
Retail · Records not stated
Ransomware attack shut down dairy operations; $4 billion brand affected
1 Aug 2026
High1 Aug 2026
WellPoint Texas
Healthcare · Records not stated
Personal information exposure; class action investigation launched
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Woeful security practices led to sensitive criminal records data leak
1 Aug 2026
Were you affected?