Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,383
Disclosures in the tracker, all years
2,096
Of those, indexed in 2026
17
Added in November
28
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 4 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
77 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United States3 Nov 2026Mavis Tire Supply LLCThe source does not say how they got in.Vermont Attorney General
- United States3 Nov 2026Mindbloom Provider Group, PAThe source does not say how they got in.Vermont Attorney General
- United States3 Nov 2026ISCO InternationalThe source does not say how they got in.Vermont Attorney General
- United States3 Nov 2026Ritz-Clark & Ben-Asher LLPThe source does not say how they got in.Vermont Attorney General
- United States2 Nov 2026Magnolia Management Company, LLCThe source does not say how they got in.Vermont Attorney General
- United States2 Nov 2026Apex Clean Energy Holdings, LLCThe source does not say how they got in.Vermont Attorney General
- United States2 Nov 2026ABC Supply Co., Inc.The source does not say how they got in.Vermont Attorney General
- United States2 Nov 2026University of Mississippi Medical Center (“UMMC”)The source does not say how they got in.California Attorney General
- United States30 Oct 2026VT Department of LaborThe source does not say how they got in.Vermont Attorney General
- United States30 Oct 2026Incredible Technologies,Inc.The source does not say how they got in.Vermont Attorney General
- United States30 Oct 2026NCH CorporationThe source does not say how they got in.California Attorney General
- United States30 Oct 2026Aesto, LLCThe source does not say how they got in.California Attorney General
Critical1 Jun 2026
Coupang
Retail · 33,700,000 records
Data breach exposed 33.7 million accounts, resulting in record $409 million fine from South Korea.
1 Jun 2026
High1 Jun 2026
Huntsville Hospital Health System
Healthcare · Records not stated
Third-party data breach exposed patient information and health records affecting multiple hospital facilities.
1 Jun 2026
Critical1 Jun 2026
Odido
Sector not stated · 6,500,000 records
ShinyHunters breach exposed 6.5 million customer records with €1M ransom demand
1 Jun 2026
Critical1 Jun 2026
Aflac Japan
Finance · 1,300,000 records
Data breach exposed 4.38 million customers, second major hack in over a year
1 Jun 2026
High1 Jun 2026
FirstClass Travel Agency
Sector not stated · Records not stated
Alleged data breach of customer records from Sydney-based travel agency
1 Jun 2026
Critical1 Jun 2026
Canada Life
Finance · 5,500,000 records
Threat actor claimed 5.5 million records for sale on underground forum
1 Jun 2026
High1 Jun 2026
University of Western Australia
Education · Records not stated
Accidental leak of student records; second breach in six months
1 Jun 2026
High1 Jun 2026
Huntsville Hospital
Healthcare · Records not stated
Patient health information compromised through third-party vendor data breach
1 Jun 2026
High1 Jun 2026
Essex NHS Trust
Healthcare · 900,000 records
Thousands of patient records stolen in cyber attack, breach disclosed over six months after notification
1 Jun 2026
Critical1 Jun 2026
Fortinet
Technology · Records not stated
74,000 firewall and VPN gateway credentials stolen from configuration files in FortiBleed data leak
1 Jun 2026
Critical1 Jun 2026
Elasticsearch Database
Technology · Records not stated
Publicly exposed database leaked 24 billion stolen credentials from infostealers and breach collections
1 Jun 2026
Critical1 Jun 2026
Charter Communications
Technology · 42,000,000 records
Data breach exposing 42M customer records after ShinyHunters extortion threat
1 Jun 2026
Critical1 Jun 2026
Tata Electronics
Technology · Records not stated
Data breach confirmed with 630GB stolen including Apple and Tesla supplier documents
1 Jun 2026
High1 Jun 2026
LastPass
Technology · Records not stated
Data breach at third-party vendor exposing customer data confirmed
1 Jun 2026
Critical1 Jun 2026
Aflac Japan
Finance · 1,300,000 records
Data breach exposed 4.38 million customers' personal information
1 Jun 2026
High1 Jun 2026
FirstClass
Retail · Records not stated
Sydney-based travel agency hit by alleged data breach with customer records leaked by threat actor
1 Jun 2026
Critical1 Jun 2026
Canada Life
Finance · 5,500,000 records
5.5 million records allegedly compromised and offered for sale on underground cybercrime forum
1 Jun 2026
High1 Jun 2026
Organisation not named
Education · Records not stated
The disclosure as indexed does not name the organisation.
Second data breach in six months; student records accidentally leaked
1 Jun 2026
High1 Jun 2026
Fortinet
Technology · Records not stated
74,000 Fortinet firewall and VPN gateway credentials stolen from configuration files in FortiBleed leak
1 Jun 2026
Critical1 Jun 2026
Coupang
Retail · 33,700,000 records
Data breach exposed 33.7 million accounts, resulted in $409M fine from South Korea
1 Jun 2026
High1 Jun 2026
Huntsville Hospital Health System
Healthcare · Records not stated
Patient data compromised in third-party breach related to Cerner system
1 Jun 2026
Critical1 Jun 2026
Fortinet
Technology · Records not stated
FortiBleed: 73,932 FortiGate firewall devices exposed with admin and VPN credentials compromised
1 Jun 2026
Critical1 Jun 2026
Novo Nordisk
Healthcare · Records not stated
Cyber extortion group claimed breach; over 1TB of data stolen, $25M extortion attempted
1 Jun 2026
Critical1 Jun 2026
Fortinet
Technology · Records not stated
FortiBleed campaign exposed admin and VPN credentials for 73,932 FortiGate firewalls and VPN gateways
1 Jun 2026
Were you affected?