Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,369
Disclosures in the tracker, all years
2,085
Of those, indexed in 2026
4
Added in November
24
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 2 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
77 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United States30 Oct 2026The Krum Public LibraryThe source does not say how they got in.Vermont Attorney General
- United States30 Oct 2026Marathon HealthThe source does not say how they got in.Vermont Attorney General
- United States29 Oct 2026BRANDco., LLCThe source does not say how they got in.Vermont Attorney General
- United States29 Oct 2026Revolve Group, Inc.The source does not say how they got in.Vermont Attorney General
- United States29 Oct 2026The Research Foundation for Mental Health, Inc.The source does not say how they got in.Vermont Attorney General
- United States29 Oct 2026Del Monte Foods Corporation II Inc.The source does not say how they got in.California Attorney General
- United States29 Oct 2026Bangkok Bank PCL - New York BranchThe source does not say how they got in.California Attorney General
- United States29 Oct 2026IRhythm TechnologiesThe source does not say how they got in.SecurityWeek
- United States28 Oct 2026Blueberry PediatricsHow they got in: a known flaw in software the victim ran.HIPAA Journal
- United States28 Oct 2026CodeSecure Inc.The source does not say how they got in.Vermont Attorney General
- United States28 Oct 202611252227 Canada Inc.The source does not say how they got in.Vermont Attorney General
- United States28 Oct 2026Troutman Pepper Locke LLPThe source does not say how they got in.California Attorney General
High5 Aug 2026
Canadian Credit Firm
Finance · 28,000 records
55GB PII and financial records of 28K customers
5 Aug 2026
Critical5 Aug 2026
5 Aug 2026
Critical5 Aug 2026
Basic-Fit Gym Operator
Sector not stated · Records not stated
1M members bank and personal data breached
5 Aug 2026
Critical5 Aug 2026
Paidwork Gig Platform
Technology · 23,300,000 records
23.3M accounts with bank details leaked
5 Aug 2026
Critical5 Aug 2026
CareCloud Health Tech
Healthcare · 350,000 records
350K patient medical and financial records exposed
5 Aug 2026
Critical5 Aug 2026
Suno AI Music
Technology · 55,300,000 records
55.3M accounts leaked with partial payment data
5 Aug 2026
Critical5 Aug 2026
5 Aug 2026
High5 Aug 2026
Cookeville Regional Medical Center
Healthcare · 330,000 records
330K patient records exposed in ransomware attack
5 Aug 2026
Medium5 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
3 Paperclip flaws exposed data & allowed unauthenticated command execution in two deployment modes
5 Aug 2026
Medium5 Aug 2026
Dutch retailer De Bijenkorf
Sector not stated · Records not stated
Amsterdam-based luxury goods chain De Bijenkorf is the latest retailer to announce a cyber incident involving a third-party logistics provider.
5 Aug 2026
Critical5 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
I was mapping the command-and-control infrastructure behind a state-linked intrusion set when the query came back and effectively ended the exercise I thought I was running.
The malware resolved its C2 address by…
5 Aug 2026
High5 Aug 2026
Organisation not named
Healthcare · 102,215 records
The disclosure as indexed does not name the organisation.
Brazil's SISVISA health surveillance system left 102,215 files totaling 79GB open online, including tax IDs and identity documents, without password protection.
5 Aug 2026
Critical5 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Unitel, Angola's dominant mobile operator, continues to recover from a cyberattack that caused outages the day of the government-owned telco's public offering.
5 Aug 2026
Medium4 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
The UK’s Police National Legal Database and Ask the Police service have been breached
4 Aug 2026
Medium4 Aug 2026
Swiss federal IT office
Government · 200 records
SwissInfo.ch reports: Following a cyberattack on the SharePoint servers operated by the Federal Office of Information Technology, Systems and Telecommunication (FOITT), access via the internet has been blocked for…
4 Aug 2026
Medium4 Aug 2026
Swiss IT agency
Government · Records not stated
The Federal Office for Information Technology and Communications (BIT) said specialists detected anomalies in on-premises Microsoft servers. The Swiss agency could not confirm exactly how the hackers got in.
4 Aug 2026
Medium4 Aug 2026
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Reports said intruders appeared to gain access to the Jira environment and other sensitive data of the Żabka retail chain. The company confirmed an intrusion occurred in late July.
4 Aug 2026
Medium3 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
A hacker has drained nearly $89m from Coldcard Bitcoin wallets after exploiting a legacy bug
3 Aug 2026
Critical3 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
The Police National Legal Database (PNLD) has confirmed that police, government and customer contact information was compromised and published on the dark web.
The data included names, organisations and work email…
3 Aug 2026
Medium3 Aug 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
An unknown Chinese-speaking threat actor has been observed running a campaign targeting Apple iOS devices by leveraging a publicly leaked version of the DarkSword exploit kit.
Attack surface management platform Censys…
3 Aug 2026
Critical3 Aug 2026
Cyberattack
Government · 31,000 records
DPA reports: The tiny principality of Liechtenstein has fallen victim to a major cyberattack in which the data of 31,000 people were stolen, the government said on Sunday. The country, which lies between Switzerland…
3 Aug 2026
Medium3 Aug 2026
Bill Curtis
Government · Records not stated
Bill Curtis reports: The full names and contact details for more than 100,000 police officers and staff have been leaked on the dark web after a hack, The Times can reveal. As part of a major security breach, hackers…
3 Aug 2026
Critical3 Aug 2026
The Herald Business
Sector not stated · 4,620,000 records
The Herald Business reports: Seoul Facilities Corp. has drawn criticism over its plan to offer 5,000 won [$3.50 USD] per affected user in response to a personal data breach involving about 4.62 million people, with…
3 Aug 2026
Medium3 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Fake Xeno Executor installers are infecting unsuspecting Roblox players with malware that provides remote access and steals sensitive information.
3 Aug 2026
Were you affected?