Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,370
Disclosures in the tracker, all years
2,084
Of those, indexed in 2026
147
Added in October
22
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 31 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
77 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United States30 Oct 2026The Krum Public LibraryThe source does not say how they got in.Vermont Attorney General
- United States30 Oct 2026Marathon HealthThe source does not say how they got in.Vermont Attorney General
- United States29 Oct 2026BRANDco., LLCThe source does not say how they got in.Vermont Attorney General
- United States29 Oct 2026Revolve Group, Inc.The source does not say how they got in.Vermont Attorney General
- United States29 Oct 2026The Research Foundation for Mental Health, Inc.The source does not say how they got in.Vermont Attorney General
- United States29 Oct 2026Del Monte Foods Corporation II Inc.The source does not say how they got in.California Attorney General
- United States29 Oct 2026Bangkok Bank PCL - New York BranchThe source does not say how they got in.California Attorney General
- United States29 Oct 2026IRhythm TechnologiesThe source does not say how they got in.SecurityWeek
- United States28 Oct 2026Blueberry PediatricsHow they got in: a known flaw in software the victim ran.HIPAA Journal
- United States28 Oct 2026CodeSecure Inc.The source does not say how they got in.Vermont Attorney General
- United States28 Oct 202611252227 Canada Inc.The source does not say how they got in.Vermont Attorney General
- United States28 Oct 2026Troutman Pepper Locke LLPThe source does not say how they got in.California Attorney General
Critical1 Sep 2026
Thomson Reuters
Legal · Records not stated
C-Track court management platform breach exposed sealed court records and personal data including SSNs affecting US and Canadian courts
1 Sep 2026
High1 Sep 2026
Department
Government · Records not stated
Department investigating data breach involving driver information
1 Sep 2026
High1 Sep 2026
Revolut
Finance · Records not stated
Data breach with $3M ransom demand; attacker threatening to sell stolen data
1 Sep 2026
Critical1 Sep 2026
CenterPoint Energy
Sector not stated · 7,490,000 records
7.49 million customer records stolen in data breach
1 Sep 2026
Critical1 Sep 2026
Springfield Public Schools
Education · Records not stated
Student and staff data breached; potentially includes Social Security numbers
1 Sep 2026
High1 Sep 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Spain's data protection authority experienced a data breach via autonomous AI agent
1 Sep 2026
High1 Sep 2026
xHealth
Healthcare · 118,000 records
Practice management and EHR software provider breach exposed 118,000 individuals' data
1 Sep 2026
Critical1 Sep 2026
AdaptHealth
Healthcare · 4,099,999 records
4.1 million people impacted; personal, health, and insurance information stolen
1 Sep 2026
High1 Sep 2026
MIP Holdings
Finance · Records not stated
Cyber attack exposed personal information of South African insurance customers
1 Sep 2026
Critical1 Sep 2026
IDScan
Technology · Records not stated
153 million driver's license scans stolen from cloud platform
1 Sep 2026
Critical1 Sep 2026
McKesson
Healthcare · 284,000,000 records
Data breach with 284 million records stolen by ShinyHunters extortion group
1 Sep 2026
High1 Sep 2026
Novocure
Healthcare · Records not stated
Cyberattack exposed US patient records in oncology firm systems
1 Sep 2026
High1 Sep 2026
Canva
Technology · Records not stated
Data breach affected 424 organizations in Turkey, exposing personal information
1 Sep 2026
High1 Sep 2026
Data breach
Government · Records not stated
Data breach investigating potential exposure of driver information including licenses
1 Sep 2026
High1 Sep 2026
Revolut
Finance · Records not stated
Data breach with attackers demanding $3 million ransom; threatening to sell stolen data
1 Sep 2026
Critical1 Sep 2026
CenterPoint Energy
Sector not stated · 7,490,000 records
Data breach exposed 7.49 million customer records
1 Sep 2026
High1 Sep 2026
Springfield Public Schools
Education · Records not stated
Student and staff data breached in cyberattack around Labor Day; may include Social Security numbers
1 Sep 2026
High1 Sep 2026
Spain's data protection authority
Government · Records not stated
Spain's data protection authority suffered a data breach executed by an autonomous AI agent
1 Sep 2026
Critical1 Sep 2026
Breach
Healthcare · 727,000 records
Breach exposed 727,000 patient and contact records, resulting in €500K CNIL fine
1 Sep 2026
Critical1 Sep 2026
Manchester Airport Group
Sector not stated · 8,700,000 records
Breach affected 8.7 million customers with approximately 640GB of data stolen
1 Sep 2026
High1 Sep 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Data breach of motor vehicle records tied to credentials stolen from officer's personal device by ShinyHunters
1 Sep 2026
High1 Sep 2026
Revolut
Finance · Records not stated
Data leak confirmed where personal data of limited customers shared with fraudster posing as official
1 Sep 2026
Critical1 Sep 2026
McKesson
Healthcare · 284,000,000 records
Data breach confirmed with 284 million records stolen including PII and PHI by ShinyHunters
1 Sep 2026
High1 Sep 2026
Elixir Medical
Healthcare · Records not stated
Employee and dependent data breach exposing SSNs, financial details, and PII
1 Sep 2026
Were you affected?