Disclosure tracker › Disclosures in 2026
Intelligence · Disclosure tracker
Disclosures in 2026
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,278
Disclosures in the tracker, all years
1,992
Of those, indexed in 2026
41
Added in October
9
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 16 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
3,949 results · Disclosures in 2026. Clear filters
High1 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Network intrusion on Homeland Security Information Network confirmed after twice ruled false positive
1 Jul 2026
High1 Jul 2026
LVM (Latvian Forestry Company)
Sector not stated · Records not stated
Ransomware attack attributed to foreign financially motivated group
1 Jul 2026
High1 Jul 2026
LVM (Latvian forestry company)
Sector not stated · Records not stated
Ransomware attack by foreign financially motivated group; systems still being restored
1 Jul 2026
High1 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Network intrusion on Homeland Security Information Network confirmed after two false positive rulings
1 Jul 2026
Critical1 Jul 2026
FortiBleed/Fortinet
Technology · Records not stated
73,932 FortiGate firewall administrative and VPN credentials exposed via credential exposure campaign
1 Jul 2026
High1 Jul 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Patient records stolen in cyberattack affecting 21 clinics, personal info and medical notes exposed
1 Jul 2026
Critical1 Jul 2026
Network intrusion
Government · Records not stated
Network intrusion confirmed on Homeland Security Information Network
1 Jul 2026
High1 Jul 2026
LastPass
Technology · Records not stated
Data breach at third-party vendor exposed customer data; latest breach confirmed
1 Jul 2026
High1 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Network intrusion on Homeland Security Information Network; initially ruled false positive twice
1 Jul 2026
Critical1 Jul 2026
Partnered Clinics (Australia)
Healthcare · Records not stated
Cyber-attack exposed Medicare numbers, treatment details, pathology results of patients
1 Jul 2026
High1 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Network intrusion on Homeland Security Information Network supporting World Cup games
1 Jul 2026
High1 Jul 2026
Network intrusion and data breach
Government · Records not stated
Network intrusion and data breach confirmed after initially ruled false positives
1 Jul 2026
Critical1 Jul 2026
MCBS Medical
Healthcare · 1,260,000 records
Medical billing company; 1.26 million patients exposed in PEAR ransomware attack affecting healthcare billing data
1 Jul 2026
High1 Jul 2026
Department for Education
Education · Records not stated
Data breach claimed by ExfilSquad group in ransomware attack
1 Jul 2026
Critical1 Jul 2026
Fortinet (FortiBleed campaign)
Technology · Records not stated
73,000+ FortiGate firewalls and VPN gateways exposed with valid admin and VPN credentials
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patients exposed in PEAR ransomware attack on healthcare billing company
1 Jul 2026
Critical1 Jul 2026
Healthcare billing company ransomware attack
Healthcare · 1,260,000 records
Healthcare billing company ransomware attack exposed 1.26 million patient records in PEAR ransomware attack.
1 Jul 2026
High1 Jul 2026
KT (Korean Telecommunications)
Technology · Records not stated
Personal data breach and unauthorized micropayment damages via illegal base stations
1 Jul 2026
High1 Jul 2026
Department for Homeland Security
Government · Records not stated
Network intrusion on Homeland Security Information Network confirmed after false positives
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
PEAR ransomware attack on medical billing company exposed 1.26 million patient records
1 Jul 2026
High1 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Network intrusion on Homeland Security Information Network confirmed after false positives
1 Jul 2026
High1 Jul 2026
Cerner (Huntsville Hospital)
Healthcare · Records not stated
Patient data compromised through third-party vendor breach at Huntsville Hospital Health System
1 Jul 2026
Critical1 Jul 2026
Healthcare billing company
Healthcare · 1,260,000 records
Healthcare billing company exposed 1.26 million patient records in PEAR ransomware attack
1 Jul 2026
High1 Jul 2026
Department of Homeland Security
Government · Records not stated
Network intrusion confirmed on HSIN used for World Cup operations
1 Jul 2026
Were you affected?