Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,574
Disclosures in the tracker, all years
2,089
Of those, indexed in 2026
7
Added in November
21
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 3 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
77 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United States30 Oct 2026The Krum Public LibraryThe source does not say how they got in.Vermont Attorney General
- United States30 Oct 2026Marathon HealthThe source does not say how they got in.Vermont Attorney General
- United States29 Oct 2026BRANDco., LLCThe source does not say how they got in.Vermont Attorney General
- United States29 Oct 2026Revolve Group, Inc.The source does not say how they got in.Vermont Attorney General
- United States29 Oct 2026The Research Foundation for Mental Health, Inc.The source does not say how they got in.Vermont Attorney General
- United States29 Oct 2026Del Monte Foods Corporation II Inc.The source does not say how they got in.California Attorney General
- United States29 Oct 2026Bangkok Bank PCL - New York BranchThe source does not say how they got in.California Attorney General
- United States29 Oct 2026IRhythm TechnologiesThe source does not say how they got in.SecurityWeek
- United States28 Oct 2026Blueberry PediatricsHow they got in: a known flaw in software the victim ran.HIPAA Journal
- United States28 Oct 2026CodeSecure Inc.The source does not say how they got in.Vermont Attorney General
- United States28 Oct 202611252227 Canada Inc.The source does not say how they got in.Vermont Attorney General
- United States28 Oct 2026Troutman Pepper Locke LLPThe source does not say how they got in.California Attorney General
High1 Aug 2026
AnMed
Healthcare · Records not stated
Nonprofit health system cyberattack forced facility closures and prolonged recovery
1 Aug 2026
Critical1 Aug 2026
Multiple US Financial Firms
Finance · Records not stated
Hackers breaking into large U.S. financial firms to steal sensitive data and extort victims
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised via anomalies detected in on-premises Microsoft servers
1 Aug 2026
Critical1 Aug 2026
Snowflake
Technology · 165,000,000 records
Credential-based cloud intrusion exposing over 100 million records (2024-2026)
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records of police and government leaked on dark web by ExfilSquad
1 Aug 2026
High1 Aug 2026
Exact Sciences/Abbott
Healthcare · Records not stated
Personal and confidential information from at-home diagnostic test users exposed
1 Aug 2026
Critical1 Aug 2026
Ernst & Young
Finance · Records not stated
Hackers stole names, addresses, Social Security numbers, and financial information from third-party platform
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised, likely through SharePoint vulnerabilities in on-premises Microsoft servers
1 Aug 2026
High1 Aug 2026
NYC Regional Center
Sector not stated · Records not stated
Data breach affecting individuals at NYC Regional Center LLC; compensation lawsuit investigation
1 Aug 2026
High1 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Data stolen in ransomware attack; attacker confirmed data deletion
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Police and government contact details, names and emails leaked on dark web
1 Aug 2026
High1 Aug 2026
200 accounts compromised through on-premises Microsoft server vulnerabilities
Government · Records not stated
200 accounts compromised through on-premises Microsoft server vulnerabilities
1 Aug 2026
Critical1 Aug 2026
PEAR ransomware attack
Healthcare · 1,260,000 records
PEAR ransomware attack exposed 1.26 million patients' medical billing data
1 Aug 2026
High1 Aug 2026
Exact Sciences / Abbott
Healthcare · Records not stated
Patient sensitive personal information exposed from at-home diagnostic tests
1 Aug 2026
High1 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack; hackers claim data deletion after extortion
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Police and government contact details leaked on dark web including names and emails
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised through suspected SharePoint vulnerabilities in on-premises Microsoft servers
1 Aug 2026
Critical1 Aug 2026
1.26 million patients exposed in PEAR ransomware attack
Healthcare · 1,260,000 records
1.26 million patients exposed in PEAR ransomware attack
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records of UK police and government officials leaked on dark web by ExfilSquad
1 Aug 2026
High1 Aug 2026
Anthropic (Claude)
Technology · Records not stated
AI models breached 3 real companies, uploaded malicious PyPI package during security tests
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised in hacking incident, SharePoint vulnerabilities suspected
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patients exposed in PEAR ransomware attack; healthcare billing company
1 Aug 2026
High1 Aug 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Healthcare advocacy vendor breach; employees' social security numbers exposed
1 Aug 2026
High1 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Data stolen in ransomware attack; hackers confirmed deletion
1 Aug 2026
Were you affected?