Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,376
Disclosures in the tracker, all years
2,090
Of those, indexed in 2026
7
Added in November
27
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 2 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
77 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United States30 Oct 2026The Krum Public LibraryThe source does not say how they got in.Vermont Attorney General
- United States30 Oct 2026Marathon HealthThe source does not say how they got in.Vermont Attorney General
- United States29 Oct 2026BRANDco., LLCThe source does not say how they got in.Vermont Attorney General
- United States29 Oct 2026Revolve Group, Inc.The source does not say how they got in.Vermont Attorney General
- United States29 Oct 2026The Research Foundation for Mental Health, Inc.The source does not say how they got in.Vermont Attorney General
- United States29 Oct 2026Del Monte Foods Corporation II Inc.The source does not say how they got in.California Attorney General
- United States29 Oct 2026Bangkok Bank PCL - New York BranchThe source does not say how they got in.California Attorney General
- United States29 Oct 2026IRhythm TechnologiesThe source does not say how they got in.SecurityWeek
- United States28 Oct 2026Blueberry PediatricsHow they got in: a known flaw in software the victim ran.HIPAA Journal
- United States28 Oct 2026CodeSecure Inc.The source does not say how they got in.Vermont Attorney General
- United States28 Oct 202611252227 Canada Inc.The source does not say how they got in.Vermont Attorney General
- United States28 Oct 2026Troutman Pepper Locke LLPThe source does not say how they got in.California Attorney General
High1 Aug 2026
AnMed Health
Healthcare · Records not stated
Cyberattack on nonprofit health system forcing facility closures and limited capacity operations
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patient records exposed in PEAR ransomware attack
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Police, government and customer contact details exposed and leaked on dark web
1 Aug 2026
Critical1 Aug 2026
Conduent
Healthcare · Records not stated
62.2 million healthcare records exposed, third-largest US healthcare breach ever
1 Aug 2026
High1 Aug 2026
Five Hong Kong firms
Sector not stated · Records not stated
Orova ransomware breached five Hong Kong organizations in debut campaign of 24 victims
1 Aug 2026
High1 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Wave of cyberattacks by UNC6671 extortion group targeting hedge funds and private-equity firms
1 Aug 2026
Critical1 Aug 2026
Snowflake (multiple customer accounts)
Technology · 165,000,000 records
Company accounts accessed and customer data stolen in cloud data-theft attacks
1 Aug 2026
High1 Aug 2026
Levi Strauss
Retail · Records not stated
Corporate data stolen via social engineering; hackers accessed three employee computers
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · 135,000 records
The disclosure as indexed does not name the organisation.
Police and government contact details published on dark web; 135K records claimed
1 Aug 2026
High1 Aug 2026
Multiple Hong Kong firms
Sector not stated · Records not stated
Orova ransomware breached five Hong Kong organizations; part of 24-victim campaign across six countries
1 Aug 2026
Medium1 Aug 2026
Stade Français
Sector not stated · Records not stated
French rugby club experienced cyberattack with data leak; systems restored from backups
1 Aug 2026
High1 Aug 2026
NHS Tayside
Healthcare · 900,000 records
Unauthorized access to medical records of deceased 9-year-old girl after staff improper access
1 Aug 2026
High1 Aug 2026
CEVA Logistics
Sector not stated · Records not stated
Data breach affecting Ajax football club, ING bank, and Ace & Tate eyewear chain
1 Aug 2026
High1 Aug 2026
200 accounts compromised through on-premises Microsoft SharePoint vulnerabilities
Government · Records not stated
200 accounts compromised through on-premises Microsoft SharePoint vulnerabilities
1 Aug 2026
High1 Aug 2026
Data theft
Government · Records not stated
Data theft confirmed; 135K contact records leaked on dark web by ExfilSquad
1 Aug 2026
Critical1 Aug 2026
Multiple water utilities
Government · Records not stated
Operational technology systems targeted in cyberattacks across at least 12 U.S. states
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised; anomalies detected in on-premises Microsoft servers, possibly via SharePoint vulnerabilities
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records stolen and leaked on dark web; police and government contact details exposed
1 Aug 2026
Critical1 Aug 2026
Victorian Courts
Government · Records not stated
Hackers leaked sensitive court data to dark web including family violence intervention details
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised in on-premises Microsoft servers, likely due to SharePoint vulnerabilities
1 Aug 2026
High1 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack; stolen data deletion confirmed by hacker group
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135k contact records stolen; police and government contact details leaked on dark web
1 Aug 2026
High1 Aug 2026
Beacon CRM
Sector not stated · Records not stated
Software firm breach affected charities; Charity Commission planning guidance
1 Aug 2026
Critical1 Aug 2026
Victorian Court System
Government · Records not stated
Sensitive data including family violence intervention orders leaked to dark web
1 Aug 2026
Were you affected?