Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,574
Disclosures in the tracker, all years
2,089
Of those, indexed in 2026
8
Added in November
22
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 3 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
78 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- United States30 Oct 2026VT Department of LaborThe source does not say how they got in.Vermont Attorney General
- United States30 Oct 2026Incredible Technologies,Inc.The source does not say how they got in.Vermont Attorney General
- United States30 Oct 2026NCH CorporationThe source does not say how they got in.California Attorney General
- United States30 Oct 2026Aesto, LLCThe source does not say how they got in.California Attorney General
- United States30 Oct 2026The Nueva SchoolThe source does not say how they got in.California Attorney General
- United States30 Oct 2026El Camino HealthThe source does not say how they got in.California Attorney General
- United States30 Oct 2026Baanx US Corp.The source does not say how they got in.California Attorney General
- United States30 Oct 2026The Krum Public LibraryThe source does not say how they got in.Vermont Attorney General
- United States30 Oct 2026Marathon HealthThe source does not say how they got in.Vermont Attorney General
- United States29 Oct 2026HCA Healthcare, Inc.The source does not say how they got in.California Attorney General
- United States29 Oct 2026Blossom BH Opco Inc.The source does not say how they got in.California Attorney General
- United States29 Oct 2026BRANDco., LLCThe source does not say how they got in.Vermont Attorney General
High31 Jul 2026
Unnamed Law Firm
Legal · 13,000 records
Hospital patient records for 13,000 patients in New Jersey exposed via cyberattack
31 Jul 2026
Critical31 Jul 2026
U.S. Civil Service/White House
Government · Records not stated
Thousands of civil servants' passwords exposed since early 2024, including some linked to White House
31 Jul 2026
Critical31 Jul 2026
Gaming accounts (multiple)
Technology · Records not stated
11 million gaming account credentials exposed in 2024 data leaks discovered by Kaspersky
31 Jul 2026
Critical31 Jul 2026
Gaming accounts (Kaspersky research)
Technology · Records not stated
Over 11 million gaming account credentials exposed and found on dark web
31 Jul 2026
High31 Jul 2026
Synnovis NHS
Healthcare · 900,000 records
Thousands of patient records stolen in major ransomware cyberattack affecting NHS trust in Essex
31 Jul 2026
Critical31 Jul 2026
Medical billing company
Healthcare · 1,300,000 records
Ransomware attack exposed protected health data on 1.3 million people; data leaked to dark web
31 Jul 2026
Critical31 Jul 2026
ANTS
Government · 19,000,000 records
Cyberattack on France's identity agency exposed 19 million records with personal data linked to ID documents
31 Jul 2026
High31 Jul 2026
Cherry Creek School District
Education · Records not stated
Data breach exposed student information, lawsuit filed
31 Jul 2026
High31 Jul 2026
Data security incident
Retail · Records not stated
Data security incident exposed personal information, $40M settlement reached
31 Jul 2026
Medium31 Jul 2026
Illuminate Education
Education · Records not stated
Edtech company data breach leading to FTC settlement and data security program requirements
31 Jul 2026
Critical31 Jul 2026
Healthcare billing company network breach
Healthcare · 1,260,000 records
Healthcare billing company network breach exposed sensitive data affecting 1.26 million people
31 Jul 2026
High31 Jul 2026
KT Corp
Technology · Records not stated
South Korea telecom giant hit with massive data breach fine by Personal Information Protection Commission
31 Jul 2026
Critical31 Jul 2026
Transport for London (TfL)
Government · Records not stated
Cyber attack caused £39m loss; hackers gained access to transport network core systems
31 Jul 2026
Critical31 Jul 2026
EVO Banco
Finance · 1,270,000 records
2024 API vulnerability exposed financial and identity data of 1.27 million records
31 Jul 2026
High31 Jul 2026
Intesa Sanpaolo S.p.A.
Finance · Records not stated
Employee unlawfully accessed customer data over two years, €31.8m impact
31 Jul 2026
High31 Jul 2026
Synnovis/NHS Essex
Healthcare · 900,000 records
Thousands of patient records stolen in ransomware attack affecting NHS trust in Essex
31 Jul 2026
Critical31 Jul 2026
McLaren Health Care
Healthcare · Records not stated
Ransomware attacks in 2023 and 2024 exposed data on 3.2 million victims
31 Jul 2026
Critical31 Jul 2026
Instructure
Education · Records not stated
Supply chain breach involving Canvas platform generated over 50% of breach notices in 2026
31 Jul 2026
High31 Jul 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
Data breach with cybersecurity vulnerabilities; fined €42 million by French regulator in Jan 2026
31 Jul 2026
High31 Jul 2026
Yearslong data breach of residents' private health-related information
Government · Records not stated
Yearslong data breach of residents' private health-related information
31 Jul 2026
High31 Jul 2026
CommonSpirit Health
Healthcare · 19,027 records
19,027 patient records exposing personal and medical information
31 Jul 2026
High31 Jul 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen in ransomware attack
31 Jul 2026
High31 Jul 2026
EY (Ernst & Young)
Legal · Records not stated
Third-party vendor breach exposed sensitive tax client data after 81-day notification delay
31 Jul 2026
Critical31 Jul 2026
Spectrum (Charter Communications)
Technology · 42,000,000 records
Data breach exposed 4.9 million confirmed accounts with 42 million records claimed stolen
31 Jul 2026
Were you affected?