Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,407
Disclosures in the tracker, all years
2,121
Of those, indexed in 2026
47
Added in November
47
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 7 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
78 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United States6 Nov 2026Family Implant and DentistryThe source does not say how they got in.Vermont Attorney General
- United States6 Nov 2026Nephrology AssociatesThe source does not say how they got in.Vermont Attorney General
- United States6 Nov 2026IronBridge Wealth Counsel, LLCThe source does not say how they got in.Vermont Attorney General
- United States6 Nov 2026Insight Credit UnionThe source does not say how they got in.Vermont Attorney General
- United States5 Nov 2026Amplifon (USA), Inc.The source does not say how they got in.Vermont Attorney General
- United States5 Nov 2026UFP technologies,The source does not say how they got in.Vermont Attorney General
- United States5 Nov 2026Queens Public LibraryThe source does not say how they got in.The Record
- United States5 Nov 2026Xplicit Audio LLCThe source does not say how they got in.Vermont Attorney General
- United States5 Nov 2026Killingly Public Schools (KPS)The source does not say how they got in.Vermont Attorney General
- United States4 Nov 2026DreamHostHow they got in: a known flaw in software the victim ran.BleepingComputer
- United States4 Nov 2026The Town of LincolnThe source does not say how they got in.Vermont Attorney General
- United States4 Nov 2026Vanguard Group, Inc.The source does not say how they got in.Vermont Attorney General
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack brought down computer network; surgeries canceled, clinics closed
1 Feb 2026
High1 Feb 2026
FirstClass Travel
Sector not stated · Records not stated
Australian travel agency customer records allegedly compromised and posted on underground hacking forums
1 Feb 2026
Critical1 Feb 2026
Exposed database
Sector not stated · 3,000,000,000 records
Exposed database leaked 3 billion records including Social Security numbers and plaintext passwords
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack shut down computer network; surgeries canceled, clinics closed
1 Feb 2026
Critical1 Feb 2026
Unknown Cloud Database
Sector not stated · 3,000,000,000 records
Misconfigured database leaked 3 billion records including SSNs and passwords
1 Feb 2026
High1 Feb 2026
Tribeca Film Festival
Sector not stated · 666,000 records
Unprotected database exposed 666,000 records of Hollywood actors and directors with contact data, no encryption
1 Feb 2026
Critical1 Feb 2026
Mexican Government (Nine Agencies)
Government · Records not stated
Hacker exploited AI tools (Claude Code and OpenAI) to compromise nine federal agencies, affecting millions of records
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack shut down computer network, surgeries canceled, clinics closed
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack brought down computer network; surgeries canceled and clinics closed
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack shut down computer network, canceled surgeries and closed clinics
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack shut down computer network, forced surgery cancellations and clinic closures
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack brought down computer network, forcing surgery cancellations and clinic closures
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack brought down computer network, forced surgery cancellations and clinic closures
1 Feb 2026
High1 Feb 2026
Ransomware attack
Education · Records not stated
Ransomware attack exposed data from Multiethnic Cohort Study including driver's license numbers and voter information
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack disrupted hospital network; surgeries canceled and clinics closed
1 Feb 2026
Critical1 Feb 2026
Unknown cloud database
Sector not stated · 3,000,000,000 records
Misconfigured database exposed 3 billion records including SSNs and plaintext passwords
1 Feb 2026
Critical1 Feb 2026
Mexican Government Agencies
Government · Records not stated
Single hacker exploited Claude Code and OpenAI's ChatGPT to breach 9 federal agencies; millions of records stolen
1 Feb 2026
High1 Feb 2026
Canada Goose
Retail · Records not stated
600,000+ customer transaction records leaked by ShinyHunters via third-party payment processor
1 Feb 2026
Critical1 Feb 2026
Mexican Government
Government · Records not stated
Hacker exploited AI tools to breach 9 federal agencies, millions of records stolen
1 Feb 2026
High1 Feb 2026
University of Pennsylvania
Education · Records not stated
ShinyHunters leaked confidential files including donor records and internal documents
1 Feb 2026
Critical1 Feb 2026
Conduent
Government · 25,000,000 records
Ransomware attack on government contractor exposed at least 25 million records
1 Feb 2026
High31 Jan 2026
Panera Bread
Technology · 5,112,502 records
5,112,502 records exposed, Email addresses, Names, Phone numbers, Physical addresses
31 Jan 2026
Critical27 Jan 2026
SoundCloud
Technology · 29,815,722 records
29,815,722 records exposed, Avatars, Email addresses, Geographic locations, Names and 2 more
27 Jan 2026
Critical21 Jan 2026
Under Armour
Technology · 72,742,892 records
72,742,892 records exposed, Dates of birth, Email addresses, Genders, Geographic locations and 2 more
21 Jan 2026
Were you affected?