Disclosure tracker › Disclosures in 2026
Intelligence · Disclosure tracker
Disclosures in 2026
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,278
Disclosures in the tracker, all years
1,991
Of those, indexed in 2026
37
Added in October
8
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 14 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
3,945 results · Disclosures in 2026. Clear filters
High1 Sep 2026
Novocure
Healthcare · Records not stated
Cyberattack exposed US patient records through unauthorized access to information systems
1 Sep 2026
High1 Sep 2026
Luminis Health
Healthcare · Records not stated
Cybersecurity incident at Anne Arundel County hospital, healthcare data compromised
1 Sep 2026
High1 Sep 2026
Elixir Medical
Healthcare · Records not stated
PHI and PII of employees and dependents exposed, including SSNs and financial details
1 Sep 2026
High1 Sep 2026
Trezor (email provider)
Technology · Records not stated
Email provider data breach affecting hundreds of thousands of crypto wallet users
1 Sep 2026
High1 Sep 2026
Florida DMV
Government · Records not stated
Data breach traced to Plant City officer's personal device, DPPA violation risk
1 Sep 2026
Critical1 Sep 2026
IDScan
Technology · Records not stated
Over 150 million driver's licenses stolen from ID verification service
1 Sep 2026
Critical1 Sep 2026
AdaptHealth
Healthcare · 4,099,999 records
Personal, health, and insurance information of 4.1 million people stolen
1 Sep 2026
Critical1 Sep 2026
Aesto Health
Healthcare · 9,500,000 records
Aesto LLC, operating as Aesto Health, disclosed that a data breach discovered recently affects more than 9.5 million individuals.
1 Sep 2026
High1 Sep 2026
Healthcare facilities operator Nutex
Healthcare · Records not stated
Cybercriminals breached company data and made an extortion attempt with it, Houston-based Nutex Health said in a filing with federal regulators.
1 Sep 2026
Medium1 Sep 2026
Healthtech company Novocure
Sector not stated · Records not stated
Healthtech company Novocure says the data of an undisclosed number of employees and more than 1,400 U.S. cancer patients has been exposed in a mid-August cyberattack.
1 Sep 2026
Critical1 Sep 2026
The company has
Healthcare · Records not stated
The company has notified the SEC that hackers accessed patient, employee, provider, business, and financial information.
The post Ransomware Gang Claims Nutex Health Data Breach appeared first on SecurityWeek.
1 Sep 2026
Critical1 Sep 2026
Organisation not named
Sector not stated · 284,000,000 records
The disclosure as indexed does not name the organisation.
ShinyHunters claims to have stolen 284 million records from McKesson
1 Sep 2026
High1 Sep 2026
Questel
Retail · 1,226,209 records
1,226,209 records exposed, Email addresses, Employers, Job titles, Names and 3 more
1 Sep 2026
Critical31 Aug 2026
Berlin
Government · Records not stated
Governing Mayor Kai Wegner said on Friday that Berlin had received an extortion demand following the cyberattack, which was discovered in mid-August.
31 Aug 2026
Critical31 Aug 2026
Berlin
Government · Records not stated
Berlin's city administration has confirmed that cybercriminals are attempting to extort the city after the Rhysida ransomware gang listed it on their data leak site.
31 Aug 2026
Critical31 Aug 2026
Organisation not named
Sector not stated · 284,000,000 records
The disclosure as indexed does not name the organisation.
The ShinyHunters extortion group has claimed the theft of 284 million records from the company’s systems.
The post McKesson Confirms Data Breach as Attacker Deadline Looms appeared first on SecurityWeek.
31 Aug 2026
Critical31 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Threat actors associated with Aurora (aka Aur0ra) ransomware have been observed using SpaceX's artificial intelligence (AI)-powered coding assistant Cursor to break into target networks, according to findings from…
31 Aug 2026
Medium31 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
One of Slovenia’s largest gambling and tourism groups has begun reopening its casinos after a cyberattack forced them to shut down for several days.
31 Aug 2026
Medium31 Aug 2026
Pharmaceutical giant McKesson
Sector not stated · Records not stated
The Texas-based pharmaceutical company McKesson A cyberattack is causing service issues for the pharmaceutical and healthcare technology company McKesson informed regulators it is in the early stages of investigating a…
31 Aug 2026
Medium31 Aug 2026
FulcrumSec
Sector not stated · Records not stated
FulcrumSec says it stole over 80 GB of data from Manchester Airports Group and plans to leak it online.
The post Extortion Group Claims Manchester Airports Group Data Breach appeared first on SecurityWeek.
31 Aug 2026
Medium31 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The company has called in CrowdStrike and others to investigate the attack that caused global network disruption.
The post Boston Scientific Still Recovering From Cyberattack appeared first on SecurityWeek.
31 Aug 2026
High31 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Cloud architectures designed to withstand human attackers are facing a new threat: AI agents that rewrite the rules on the pace and scope of attacks.
The recent OpenAI incident involving Hugging Face offers an early…
31 Aug 2026
Critical31 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The Rhysida ransomware group has claimed the exfiltration of over 5TB of data, including personal information and credentials.
The post Berlin Won’t Pay Extortion Group Claiming Data Theft appeared first on SecurityWeek.
31 Aug 2026
Medium30 Aug 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
Extortion group FulcrumSec claims they stole 86GB of Manchester Airports Group data after finding API credentials exposed in client-side JavaScript. Manchester Airports Group (MAG) disclosed a data breach on August 27…
30 Aug 2026
Were you affected?