152 Chrome Live Wallpaper Extensions: Socket says the extensions worked as wallpaper tools, but also logged user data, disguised install traffic as Google clicks, and fed ad sites. — Jun 2026· FulcrumSec Targets Novo Nordisk, Leaks: FulcrumSec leaked data stolen from Novo Nordisk, claiming to have exfiltrated 1.3TB, including clinical records and AI research assets. On June 15, 2026, a data-theft extortion group calling itself FulcrumSec began leaki — Jun 2026· IE: HSE fined €300,000 after: Louise Hickey reports: The HSE has been fined €300,000 by the Data Protection Commission (DPC) over a breach of patient’s personal data in 2018 at the Midland Regional Hospital, Tullamore. The Data Protection Commission — Jun 2026· FortiBleed: A newly discovered data leak dubbed "FortiBleed" has exposed what appears to be a collection of Fortinet and FortiGate VPN credentials for 73,932 firewall URLs at organizations worldwide. [...] — Jun 2026· Kodak: Kodak has confirmed that it's working with external cybersecurity experts to investigate a security breach after hackers gained access to some of the company's data. [...] — Jun 2026· What 22,000 breaches teach us: The 2026 Verizon Data Breach Investigations Report analyzed more than 22,000 confirmed data breaches across 145 countries. Its findings point to a single uncomfortable truth: organizations cannot patch fast enough to pre — Jun 2026· Microsoft Teams Relay Servers Abused: The attackers deployed a new Go-based backdoor that uses Microsoft Teams servers for command-and-control. The post Microsoft Teams Relay Servers Abused in DragonForce Ransomware Attack appeared first on SecurityWeek. — Jun 2026· The Top 10 Attack Surface: Breaches don't always start with a zero-day. An exposed admin panel can get brute-forced, or credentials reused from a previous attack. But when a vulnerability does drop — like MongoBleed earlier this year, which let at — Jun 2026· One threat actor demanded $50: Yesterday, DataBreaches reported that FulcrumSec had hacked Danish pharmaceutical giant Novo Nordisk. FulcrumSec followed up on that reporting by releasing their own very detailed report on their dark web leak site about — Jun 2026· iRhythm Hit by Cyberattack, Patient: iRhythm disclosed a cyberattack via third-party apps where patient and proprietary data was stolen, followed by a ransom demand. iRhythm Technologies is a U.S.-based digital healthcare company specializing in remote card — Jun 2026· 152 Chrome Live Wallpaper Extensions: Socket says the extensions worked as wallpaper tools, but also logged user data, disguised install traffic as Google clicks, and fed ad sites. — Jun 2026· FulcrumSec Targets Novo Nordisk, Leaks: FulcrumSec leaked data stolen from Novo Nordisk, claiming to have exfiltrated 1.3TB, including clinical records and AI research assets. On June 15, 2026, a data-theft extortion group calling itself FulcrumSec began leaki — Jun 2026· IE: HSE fined €300,000 after: Louise Hickey reports: The HSE has been fined €300,000 by the Data Protection Commission (DPC) over a breach of patient’s personal data in 2018 at the Midland Regional Hospital, Tullamore. The Data Protection Commission — Jun 2026· FortiBleed: A newly discovered data leak dubbed "FortiBleed" has exposed what appears to be a collection of Fortinet and FortiGate VPN credentials for 73,932 firewall URLs at organizations worldwide. [...] — Jun 2026· Kodak: Kodak has confirmed that it's working with external cybersecurity experts to investigate a security breach after hackers gained access to some of the company's data. [...] — Jun 2026· What 22,000 breaches teach us: The 2026 Verizon Data Breach Investigations Report analyzed more than 22,000 confirmed data breaches across 145 countries. Its findings point to a single uncomfortable truth: organizations cannot patch fast enough to pre — Jun 2026· Microsoft Teams Relay Servers Abused: The attackers deployed a new Go-based backdoor that uses Microsoft Teams servers for command-and-control. The post Microsoft Teams Relay Servers Abused in DragonForce Ransomware Attack appeared first on SecurityWeek. — Jun 2026· The Top 10 Attack Surface: Breaches don't always start with a zero-day. An exposed admin panel can get brute-forced, or credentials reused from a previous attack. But when a vulnerability does drop — like MongoBleed earlier this year, which let at — Jun 2026· One threat actor demanded $50: Yesterday, DataBreaches reported that FulcrumSec had hacked Danish pharmaceutical giant Novo Nordisk. FulcrumSec followed up on that reporting by releasing their own very detailed report on their dark web leak site about — Jun 2026· iRhythm Hit by Cyberattack, Patient: iRhythm disclosed a cyberattack via third-party apps where patient and proprietary data was stolen, followed by a ransom demand. iRhythm Technologies is a U.S.-based digital healthcare company specializing in remote card — Jun 2026·
The worst breaches of 2026, ranked and updated live
Exposure Intelligence Platform

Continuous Visibility
Across Your Attack Surface.

Exposure Mapping · Risk Quantification · Continuous Surveillance

Every domain carries an exposure profile — credential breaches, infrastructure gaps, regulatory filings, dark web indexing. LeakTrace correlates the same intelligence sources adversaries use into a single, quantified risk posture before they operationalize the data.

No account required
Results in 60 seconds
Read-only · no install
0Intelligence sources correlated
0Indexed breach databases
0Compromised records mapped
0Attack surfaces under surveillance
Live counter
Business Email Compromise — reported losses, year to date
$0
Business Email Compromise — an attacker gets inside an inbox, watches finance traffic, then redirects a wire to themselves. Highest-loss internet-crime category the FBI tracks, ten years running.
$3.04B
2025 full year (FBI IC3)
$10B+
Estimated true global losses
$123K
Average loss per incident
Counter ticks live from Jan 1 at the FBI's reported run rate · Sources: FBI IC3, Microsoft Digital Defense, APWG eCrime (2025)
Run Shadow on my email How we cut this number →
Shadow · Read-only mailbox forensics

See your email the way attackers see it.

Shadow reads every forwarding rule, every filter, every login method, and every connected device across your Microsoft 365 or Google Workspace. Nothing installed. Nothing changed. One admin click.

BEC attackers stay inside a hacked email account for 38 days before triggering a payment. Shadow runs in four minutes.

Run Shadow on my email → Why we built it
Live Threat Intelligence
5334 Active Incidents Open Full Map
How It Works

The LeakTrace Methodology.

01
Domain Fingerprinting

Enumerate every publicly exposed asset — subdomains, open ports, SSL configuration, DNS topology, and infrastructure signatures.

02
Source Correlation

Cross-reference across credential repositories, breach indices, threat feeds, paste archives, and regulatory registries.

03
Risk Quantification

19 weighted signals produce a composite exposure score (0-100) with severity classification: Critical, High, Moderate, Low.

04
Intelligence Delivery

5 analyst-grade reports generated within 24 hours: Infrastructure Evidence, Credential Exposure, Statutory Mapping, Executive Summary, and Master Defence Report.

05
Continuous Surveillance

Automated daily rescans. Threshold-based alerting on new exposures. Longitudinal risk trend analysis.

The Intelligence Layer

Exposure Data
Is Already Indexed.

Compromised credentials, infrastructure metadata, and Business Numbers persist across breach repositories, paste archives, and data broker networks. This information has been queryable since the moment of exfiltration.

LeakTrace correlates those same sources. The difference between visibility and exposure is whether you map the data before an adversary acts on it.

98 billion compromised records indexed. Your exposure profile is already assembled.
Credential Repositories

Major breach databases containing billions of compromised credentials, cross-referenced by domain, email pattern, and organizational association.

Data Broker Indices

Business Numbers, contact records, and organizational metadata aggregated across commercial data broker networks and public registry filings.

Threat Intelligence Feeds

Paste site archives, credential dump repositories, and active monitoring channels where exfiltrated data surfaces and is distributed.

Infrastructure Telemetry

DNS topology, certificate chains, open service enumeration, header analysis. Automated reconnaissance identifies the same gaps that adversary tooling maps.

Deployment Models

One Objective.

Self-Serve  ·  Automated
LeakTrace Individual

Automated exposure scan across credential repositories, data broker indices, and threat intelligence feeds. Quantified risk assessment with prioritized remediation protocol.

  • Confirmed breach database scan
  • Criminal-targeting source exposure check
  • Data broker exposure assessment
  • SIM swap vulnerability profile
  • Session hijack and cookie theft risk score
  • Prioritized remediation guidance for every finding
Assessment-Driven  ·  Managed
LeakTrace Business

Full external attack surface assessment. Credential exposure, infrastructure telemetry, subdomain enumeration — documented, scored, and mapped to a remediation roadmap.

  • Corporate domain and subdomain exposure assessment
  • Employee credential breach exposure
  • Infrastructure vulnerability mapping
  • Hardcoded API keys in client-side code
  • Exposed configuration files and source repositories
  • Subdomain takeover and dangling-DNS risk
  • Public cloud-storage exposure
  • Forgotten subdomains via Certificate Transparency logs
  • Outdated JavaScript libraries with known CVEs
  • Criminal-targeting source exposure indicators
  • Ransomware and BEC risk assessment
  • Full remediation roadmap and implementation
Exposure Landscape
1 in 3

Individuals With Documented Credential Exposure

The median individual appears in four or more confirmed breach events. The data is indexed, searchable, and actively referenced by adversary infrastructure.

$16.6B
Internet crime losses recorded in 2024
FBI IC3, 2024
$4.44M
Average cost of a single business breach
IBM, 2024
98B+
Credential records in circulation from documented breaches
LeakTrace indexed corpus
194
Days the average organization takes to discover they were breached
IBM, 2024

194 days. The average dwell time between initial compromise and detection. During that window, the organization operates without visibility into active adversary presence.

LeakTrace correlates the same intelligence sources used in adversary reconnaissance. Exposure is identified and quantified before it becomes operational.

Internet Crime Losses — USD FBI IC3 Data
$16.6B ▲ 33% YoY
Projected →
2019202020212022202320242025
$16.6B in 2024
Reported losses only. True cost estimated 3–5× higher. Source: FBI IC3 Annual Report.
For Organizations & Partners

Deploy Intelligence at Scale

Partner Program
White-Label Intelligence Under Your Brand

Deliver branded cybersecurity assessments to your clients. Your logo, your colors, your name. We provide the intelligence engine. You keep the margin.

Partner Program
Enterprise API
Programmatic Intelligence Access

Integrate risk scoring, entity intelligence, and exposure data directly into your underwriting, lending, or vendor risk systems via REST API.

API Documentation
Trusted Across Industries

Trusted by the Professionals Who Secure Canadian Organizations

Law Firms
Accounting Firms
Insurance Brokers
MSPs
Financial Advisors
Healthcare Clinics