Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,406
Disclosures in the tracker, all years
2,120
Of those, indexed in 2026
45
Added in November
46
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 6 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
77 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United States5 Nov 2026Xplicit Audio LLCThe source does not say how they got in.Vermont Attorney General
- United States5 Nov 2026Killingly Public Schools (KPS)The source does not say how they got in.Vermont Attorney General
- United States4 Nov 2026DreamHostHow they got in: a known flaw in software the victim ran.BleepingComputer
- United States4 Nov 2026The Town of LincolnThe source does not say how they got in.Vermont Attorney General
- United States4 Nov 2026Vanguard Group, Inc.The source does not say how they got in.Vermont Attorney General
- United States4 Nov 2026Byker & Associates, Inc.The source does not say how they got in.Vermont Attorney General
- United States4 Nov 2026RevSpring, Inc.The source does not say how they got in.California Attorney General
- United States4 Nov 2026Hoag Memorial Hospital PresbyterianThe source does not say how they got in.California Attorney General
- United States4 Nov 2026New Century Ophthamology P.C.The source does not say how they got in.Vermont Attorney General
- United States4 Nov 2026Alation Inc.The source does not say how they got in.Vermont Attorney General
- United States3 Nov 2026WorkOSThe source does not say how they got in.BleepingComputer (via SecOpsNews feed)
- United States3 Nov 2026Cognitive Health Technologies (New York)The source does not say how they got in.HIPAA Journal
Critical1 Apr 2026
ANTS (French ID Agency)
Government · 19,000,000 records
Cyberattack exposed 19 million records containing personal data linked to national identity
1 Apr 2026
High1 Apr 2026
ADT
Sector not stated · 30,814 records
Cybercriminals breached systems and stole limited set of customer and prospective customer data
1 Apr 2026
Critical1 Apr 2026
Intesa Sanpaolo S.p.A.
Finance · Records not stated
Employee unlawfully accessed customer data over two years; €31.8m fine for breach transparency failure
1 Apr 2026
High1 Apr 2026
Ryanair
Sector not stated · Records not stated
Breach exposed legal emails, flight data, and banking details; data claimed on hacker forums
1 Apr 2026
Critical1 Apr 2026
ANTS (French ID Agency)
Government · Records not stated
Cyberattack exposed 19 million personal identity records including government data
1 Apr 2026
High1 Apr 2026
Bank of Baroda (BoB)
Finance · Records not stated
Alleged data breach involving sensitive banking and corporate information
1 Apr 2026
High1 Apr 2026
Nissan
Retail · Records not stated
Data breach via compromise of third-party vendor file-transfer system
1 Apr 2026
High1 Apr 2026
Bank of Baroda
Finance · Records not stated
Alleged data breach affecting customer data
1 Apr 2026
Critical1 Apr 2026
US Government Agency (unnamed)
Government · Records not stated
CISA agency breached through Cisco vulnerability; FIRESTARTER backdoor allowed persistent access through March 2026
1 Apr 2026
High1 Apr 2026
CISA (U.S. Federal Agency)
Government · Records not stated
Unnamed U.S. department breached through Cisco vulnerability; FIRESTARTER backdoor allowed access through March 2026
1 Apr 2026
Critical1 Apr 2026
Puerto Rico Government Agency
Government · Records not stated
Mapping service exposed 1 million Social Security numbers
1 Apr 2026
High1 Apr 2026
CISA/US Federal Agency
Government · Records not stated
US federal department breached through Cisco vulnerability allowing FIRESTARTER backdoor malware access through March 2026
1 Apr 2026
Critical1 Apr 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Major cyberattack exposing 19 million French citizen identity records
1 Apr 2026
Critical1 Apr 2026
UK BioBank / Alibaba
Healthcare · Records not stated
500,000 Britons' private health records offered for sale on Chinese website; de-identified data advertised
1 Apr 2026
Critical1 Apr 2026
ANTS (French National Agency)
Government · 19,000,000 records
Cyberattack exposed 19 million records from France's identity agency with personal data linked to ID systems
1 Apr 2026
Critical1 Apr 2026
ShinyHunters (multiple brands)
Retail · 9,000,000 records
Hacking group claimed compromise of 9 major brands including Zara, affecting 9M+ records
1 Apr 2026
Critical1 Apr 2026
CISA/US Government
Government · Records not stated
US agency breached via Cisco vulnerability with FIRESTARTER backdoor malware allowing persistent access
1 Apr 2026
Critical1 Apr 2026
Instructure Canvas
Education · 275,000,000 records
ShinyHunters breach claimed 275 million records from 8,809 schools, exposing student and staff data
1 Apr 2026
High1 Apr 2026
CISA/Unnamed US Federal Department
Government · Records not stated
Breach via Cisco vulnerability with FIRESTARTER backdoor malware allowing access through March
1 Apr 2026
High1 Apr 2026
US Department (CISA)
Government · Records not stated
Breached through Cisco vulnerability; FIRESTARTER backdoor allowed access through March 2026
1 Apr 2026
High1 Apr 2026
Ransomware attack affected 169,000 patients across two facilities
Healthcare · 169,000 records
Ransomware attack affected 169,000 patients across two facilities
1 Apr 2026
Critical1 Apr 2026
CISA/US Department
Government · Records not stated
US agency breached through Cisco vulnerability, FIRESTARTER backdoor allowed access through March
1 Apr 2026
High1 Apr 2026
Vercel
Technology · Records not stated
OAuth supply chain compromise exposing environment variables through trusted third-party apps
1 Apr 2026
Critical1 Apr 2026
ANTS (France Identity Agency)
Government · 19,000,000 records
19 million records exposed in cyberattack on French national ID agency
1 Apr 2026
Were you affected?