Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,383
Disclosures in the tracker, all years
2,096
Of those, indexed in 2026
17
Added in November
28
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 4 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
77 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United States3 Nov 2026Mavis Tire Supply LLCThe source does not say how they got in.Vermont Attorney General
- United States3 Nov 2026Mindbloom Provider Group, PAThe source does not say how they got in.Vermont Attorney General
- United States3 Nov 2026ISCO InternationalThe source does not say how they got in.Vermont Attorney General
- United States3 Nov 2026Ritz-Clark & Ben-Asher LLPThe source does not say how they got in.Vermont Attorney General
- United States2 Nov 2026Magnolia Management Company, LLCThe source does not say how they got in.Vermont Attorney General
- United States2 Nov 2026Apex Clean Energy Holdings, LLCThe source does not say how they got in.Vermont Attorney General
- United States2 Nov 2026ABC Supply Co., Inc.The source does not say how they got in.Vermont Attorney General
- United States2 Nov 2026University of Mississippi Medical Center (“UMMC”)The source does not say how they got in.California Attorney General
- United States30 Oct 2026VT Department of LaborThe source does not say how they got in.Vermont Attorney General
- United States30 Oct 2026Incredible Technologies,Inc.The source does not say how they got in.Vermont Attorney General
- United States30 Oct 2026NCH CorporationThe source does not say how they got in.California Attorney General
- United States30 Oct 2026Aesto, LLCThe source does not say how they got in.California Attorney General
Critical1 Jun 2026
Odido
Technology · 6,500,000 records
ShinyHunters stole 6.5 million customer records, €1M ransom demanded
1 Jun 2026
High1 Jun 2026
FirstClass
Retail · Records not stated
Australian travel agency data breach with customer records compromised by threat actor
1 Jun 2026
Critical1 Jun 2026
Fortinet
Technology · Records not stated
FortiBleed campaign exposed verified admin credentials and VPN access for 73,932 FortiGate systems
1 Jun 2026
Critical1 Jun 2026
Baylor Genetics
Healthcare · 2,800,000 records
2.8 million patients affected; exposed medical conditions, SSNs, and employee information
1 Jun 2026
Critical1 Jun 2026
Charter Communications
Technology · 42,000,000 records
Data breach confirmed; ShinyHunters extortion group threatened release of customer data; 42 million records
1 Jun 2026
Critical1 Jun 2026
McKesson
Healthcare · 284,000,000 records
Data breach confirmed; ShinyHunters claimed theft of 284 million records including PII and PHI
1 Jun 2026
Critical1 Jun 2026
Odido
Sector not stated · 6,500,000 records
ShinyHunters stole 6.5M customer records; €1M ransom demanded
1 Jun 2026
Critical1 Jun 2026
Aflac Japan
Finance · 1,300,000 records
Exposed 4.38 million customers; second major breach in over a year
1 Jun 2026
High1 Jun 2026
FirstClass
Sector not stated · Records not stated
Customer records breached; Sydney-based travel agency data allegedly stolen and posted on underground hacking forums
1 Jun 2026
Critical1 Jun 2026
Canada Life
Finance · 5,500,000 records
5.5 million records allegedly exposed including customer, employee, and corporate data
1 Jun 2026
High1 Jun 2026
Lands' End
Retail · Records not stated
Data breach impacting customer records; settlement reached with eligible customers receiving $5K
1 Jun 2026
High1 Jun 2026
University of Western Australia
Education · Records not stated
Second data breach in six months; accidental leak of student records
1 Jun 2026
High1 Jun 2026
US Bank
Finance · Records not stated
Investigating data breach following LockBit ransomware claim threatening to publish stolen data
1 Jun 2026
High1 Jun 2026
Huntsville Hospital
Healthcare · Records not stated
Patient health information compromised via third-party vendor breach
1 Jun 2026
High1 Jun 2026
Essex NHS Trust
Healthcare · 900,000 records
Patient records stolen in cyber attack; disclosure delayed over six months
1 Jun 2026
High1 Jun 2026
Fortinet
Technology · Records not stated
74,000 firewall and VPN gateway credentials stolen from configuration files
1 Jun 2026
High1 Jun 2026
Fairlife (Coca-Cola subsidiary)
Retail · Records not stated
Ransomware attack resulted in theft of company data from dairy subsidiary
1 Jun 2026
High1 Jun 2026
Partnered Health
Healthcare · Records not stated
Australian GP network breach exposed patient records on dark web
1 Jun 2026
High1 Jun 2026
Huntsville Hospital Health System
Healthcare · Records not stated
Third-party breach exposed patient information at hospital facilities
1 Jun 2026
High1 Jun 2026
LastPass
Technology · Records not stated
Third-party vendor breach exposed customer data
1 Jun 2026
Critical1 Jun 2026
Personal information of 3 million Texans
Government · Records not stated
Personal information of 3 million Texans exposed by cyber attack
1 Jun 2026
Critical1 Jun 2026
Personal information of 3 million Texans
Government · Records not stated
Personal information of 3 million Texans exposed in cyber attack
1 Jun 2026
Critical1 Jun 2026
Fortinet FortiGate
Technology · Records not stated
Dataset containing valid administrative and VPN credentials for 73,932 FortiGate firewalls exposed
1 Jun 2026
Critical1 Jun 2026
Fortinet
Technology · Records not stated
FortiBleed: Verified administrator credentials for 73,000+ VPN devices exposed globally
1 Jun 2026
Were you affected?