Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,574
Disclosures in the tracker, all years
2,089
Of those, indexed in 2026
7
Added in November
21
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 3 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
77 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United States30 Oct 2026The Krum Public LibraryThe source does not say how they got in.Vermont Attorney General
- United States30 Oct 2026Marathon HealthThe source does not say how they got in.Vermont Attorney General
- United States29 Oct 2026BRANDco., LLCThe source does not say how they got in.Vermont Attorney General
- United States29 Oct 2026Revolve Group, Inc.The source does not say how they got in.Vermont Attorney General
- United States29 Oct 2026The Research Foundation for Mental Health, Inc.The source does not say how they got in.Vermont Attorney General
- United States29 Oct 2026Del Monte Foods Corporation II Inc.The source does not say how they got in.California Attorney General
- United States29 Oct 2026Bangkok Bank PCL - New York BranchThe source does not say how they got in.California Attorney General
- United States29 Oct 2026IRhythm TechnologiesThe source does not say how they got in.SecurityWeek
- United States28 Oct 2026Blueberry PediatricsHow they got in: a known flaw in software the victim ran.HIPAA Journal
- United States28 Oct 2026CodeSecure Inc.The source does not say how they got in.Vermont Attorney General
- United States28 Oct 202611252227 Canada Inc.The source does not say how they got in.Vermont Attorney General
- United States28 Oct 2026Troutman Pepper Locke LLPThe source does not say how they got in.California Attorney General
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records including police and government contact details leaked on dark web
1 Aug 2026
Critical1 Aug 2026
Snowflake (165+ customers)
Technology · 165,000,000 records
Hacker stole billions of records from 165+ companies via Snowflake compromise
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patients exposed in PEAR ransomware attack; medical billing and practice management data compromised
1 Aug 2026
High1 Aug 2026
Coldcard
Finance · Records not stated
Wallet breach exposed flaws in cryptocurrency security technology
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised via SharePoint vulnerabilities in on-premises Microsoft servers
1 Aug 2026
High1 Aug 2026
NYC Regional Center LLC
Sector not stated · Records not stated
Data breach exposed personal information
1 Aug 2026
High1 Aug 2026
Żabka Polska
Retail · Records not stated
Major Polish retailer with 13K stores, 541,000 Jira issues and stolen data exposed
1 Aug 2026
Critical1 Aug 2026
Snowflake customers (165+ companies)
Technology · 165,000,000 records
Hacker stole data from more than 165 Snowflake customers, billions of records compromised
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised, anomalies detected in on-premises Microsoft servers, SharePoint vulnerabilities suspected
1 Aug 2026
High1 Aug 2026
Quantum Health
Healthcare · Records not stated
Healthcare advocacy vendor breach exposed employees' social security numbers
1 Aug 2026
High1 Aug 2026
Hugging Face
Technology · Records not stated
Internal datasets and credentials breached; users urged to rotate access tokens
1 Aug 2026
High1 Aug 2026
Bank of Baroda
Finance · Records not stated
Hacker compromised employee email account; unauthorized access to customer data confirmed
1 Aug 2026
Critical1 Aug 2026
Origin Energy
Sector not stated · 2,000,000 records
2 million customer records stolen in cyberattack; Australia's largest energy retailer hacked
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records stolen; police and government contact details leaked on dark web
1 Aug 2026
High1 Aug 2026
River Bank & Trust
Finance · Records not stated
Ransomware attack; data deletion confirmed by ransomware gang
1 Aug 2026
Critical1 Aug 2026
Amgen
Healthcare · Records not stated
Patient health data and intellectual property stolen from cloud environment
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Police and government contact details leaked on dark web; names and emails published
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Hackers compromised 200 accounts; anomalies detected in on-premises Microsoft servers
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Technology · 165,000,000 records
The disclosure as indexed does not name the organisation.
Hacker stole data from 165+ Snowflake customers, billions of records compromised
1 Aug 2026
High1 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware gang stole data in attack; gang later confirmed data deletion
1 Aug 2026
High1 Aug 2026
Breach
Government · Records not stated
Breach exposed UK police, government and customer contact details on dark web
1 Aug 2026
High1 Aug 2026
River Financial Corporation
Finance · Records not stated
Ransomware attack stole data; hackers confirmed deletion
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised in on-premises Microsoft servers, SharePoint vulnerabilities suspected
1 Aug 2026
High1 Aug 2026
Liechtenstein AML Registry
Government · Records not stated
Attackers exfiltrated records on 31,000 legal entities from beneficial ownership registry
1 Aug 2026
Were you affected?