Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,372
Disclosures in the tracker, all years
2,086
Of those, indexed in 2026
4
Added in November
24
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 2 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
77 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United States30 Oct 2026The Krum Public LibraryThe source does not say how they got in.Vermont Attorney General
- United States30 Oct 2026Marathon HealthThe source does not say how they got in.Vermont Attorney General
- United States29 Oct 2026BRANDco., LLCThe source does not say how they got in.Vermont Attorney General
- United States29 Oct 2026Revolve Group, Inc.The source does not say how they got in.Vermont Attorney General
- United States29 Oct 2026The Research Foundation for Mental Health, Inc.The source does not say how they got in.Vermont Attorney General
- United States29 Oct 2026Del Monte Foods Corporation II Inc.The source does not say how they got in.California Attorney General
- United States29 Oct 2026Bangkok Bank PCL - New York BranchThe source does not say how they got in.California Attorney General
- United States29 Oct 2026IRhythm TechnologiesThe source does not say how they got in.SecurityWeek
- United States28 Oct 2026Blueberry PediatricsHow they got in: a known flaw in software the victim ran.HIPAA Journal
- United States28 Oct 2026CodeSecure Inc.The source does not say how they got in.Vermont Attorney General
- United States28 Oct 202611252227 Canada Inc.The source does not say how they got in.Vermont Attorney General
- United States28 Oct 2026Troutman Pepper Locke LLPThe source does not say how they got in.California Attorney General
High6 Aug 2026
6 Aug 2026
Critical6 Aug 2026
Credential Dump Elasticsearch
Sector not stated · Records not stated
24B stolen credential records exposed publicly
6 Aug 2026
High6 Aug 2026
Healthcare Highways
Healthcare · Records not stated
Ransomware attack on US health network provider
6 Aug 2026
High6 Aug 2026
Loyalist College
Education · Records not stated
INC_RANSOM ransomware attack on Canadian college
6 Aug 2026
High6 Aug 2026
CareCloud Health
Healthcare · 350,000 records
350K patient SSNs and payment records stolen from AWS
6 Aug 2026
Critical6 Aug 2026
PNLD UK Police Database
Government · Records not stated
Police and government contact data published on dark web
6 Aug 2026
Critical6 Aug 2026
Craneware Group
Healthcare · Records not stated
Significant volume stolen from US hospital billing systems
6 Aug 2026
Medium6 Aug 2026
Meta AI model
Sector not stated · Records not stated
Meta has become the latest AI company to confirm that one of its models hacked a real organization during cybersecurity testing, as similar incidents continue to emerge following OpenAI'sOpenAI's initial disclosure…
6 Aug 2026
Medium6 Aug 2026
ThreatsDay
Technology · Records not stated
Apparently, opening the thing is now enough. A repo can run before the first prompt, a package can hide among hundreds, and a harmless-looking PDF can finish the job.
This week runs on cheap leverage: exposed servers…
6 Aug 2026
High6 Aug 2026
Pennington County Attorney
Government · Records not stated
Government systems compromised in cyberattack
6 Aug 2026
High6 Aug 2026
6 Aug 2026
High6 Aug 2026
Klue Intelligence Platform
Technology · Records not stated
195-200 firms breached via legacy credential
6 Aug 2026
Critical6 Aug 2026
Nayax Fintech
Finance · Records not stated
100TB stolen including payment transaction records
6 Aug 2026
Critical6 Aug 2026
6 Aug 2026
Critical6 Aug 2026
Aflac Life Insurance Japan
Finance · 1,300,000 records
4.38M policyholders and bank accounts stolen
6 Aug 2026
Critical6 Aug 2026
Klue Supply Chain
Technology · 2,022 records
~200 firms breached via unrevoked 2022 credential
6 Aug 2026
Medium6 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Forescout found 22 internet-facing Rockwell Automation programmable logic controllers (PLCs) in cities hit by recent cyberattacks on US water utilities. Nineteen used the same mobile carrier network.
Its August 3 scan…
6 Aug 2026
Medium6 Aug 2026
Liechtenstein Beneficial Register
Government · Records not stated
31K corporate ownership records breached
6 Aug 2026
Critical6 Aug 2026
Klue Supply Chain Breach
Technology · Records not stated
200 firms hit via stale OAuth credential
6 Aug 2026
Medium6 Aug 2026
The NL Times
Sector not stated · Records not stated
The NL Times reports: Online retailer Bol has warned customers about a data breach involving one of its logistics partners. The company said unauthorized parties accessed the partner’s systems, but emphasized…
6 Aug 2026
Medium6 Aug 2026
Organisation not named
Sector not stated · 100,000,000 records
The disclosure as indexed does not name the organisation.
A Canadian hacker has admitted involvement in the widespread compromise of 165 Snowflake customer accounts used to steal data and extort victims
6 Aug 2026
Medium6 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The incident involved a testing environment set up by Irregular, similar to what Anthropic reported last week.
The post Meta AI Hacked External Systems During Cybersecurity Testing appeared first on SecurityWeek.
6 Aug 2026
Medium6 Aug 2026
Liechtenstein Government Register
Government · Records not stated
31K corporate beneficiary records breached
6 Aug 2026
Critical6 Aug 2026
DentaQuest Sun Life
Healthcare · Records not stated
2.6M Medicaid beneficiary records leaked
6 Aug 2026
Were you affected?