Disclosure tracker › Disclosures in 2026
Intelligence · Disclosure tracker
Disclosures in 2026
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,278
Disclosures in the tracker, all years
1,991
Of those, indexed in 2026
37
Added in October
8
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 14 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
3,945 results · Disclosures in 2026. Clear filters
High27 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Authorities in Australia have arrested two men believed to be members of TeamPCP, a prolific cybercrime and data extortion group blamed for perpetrating the longest running spree of software supply chain attacks ever.…
27 Aug 2026
Critical27 Aug 2026
Carhartt data breach
Sector not stated · 12,900,000 records
The ShinyHunters extortion group has published sensitive data from nearly 13 million accounts stolen from clothing retailer giant Carhartt earlier this month, according to data breach notification service Have I Been…
27 Aug 2026
Medium27 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The cybersecurity incident has disrupted Boston Scientific’s ability to process and ship customer orders.
The post Cyberattack Causes Global Disruption at Boston Scientific appeared first on SecurityWeek.
27 Aug 2026
Medium27 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The pro-Russian hacker group Server Killers claimed responsibility for the attack.
The post Pro-Russian Hackers Claim Responsibility for Major Cyberattack on Norway’s Public Digital Services appeared first on…
27 Aug 2026
Medium26 Aug 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
The company released a statement and filed documents with the Securities and Exchange Commission (SEC) saying a cybersecurity incident was discovered on Tuesday.
26 Aug 2026
Medium26 Aug 2026
Boston Scientific
Healthcare · Records not stated
Medical technology company Boston Scientific has been targeted in a cyberattack that disrupted some of its IT systems, causing operational disruptions globally.
26 Aug 2026
Medium26 Aug 2026
Organisation not named
Sector not stated · 2,000 records
The disclosure as indexed does not name the organisation.
Here’s one we missed last week. Hannah Spray reports: The personal information of more than 2,000 people was stolen from Autism Services of Saskatoon during a data breach last year. In the aftermath, the…
26 Aug 2026
Medium26 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
The agency has released guidance on reducing internet exposure in the wake of the recent Iran-linked hacker attacks.
The post CISA: Over 100 Internet-Exposed Water Systems Targeted in July Cyberattacks appeared first…
26 Aug 2026
Medium26 Aug 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Nutex Health has informed the SEC that it recently detected unauthorized access and data exfiltration.
The post Sensitive Information Exposed in Nutex Health Data Breach appeared first on SecurityWeek.
26 Aug 2026
Critical25 Aug 2026
Carhartt
Retail · 12,933,413 records
12,933,413 records exposed, Email addresses, Names, Phone numbers, Physical addresses
25 Aug 2026
Medium25 Aug 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
The Los Angeles County Museum of Art (LACMA) has announced that a breach last year exposed customer and employee information.
25 Aug 2026
Critical25 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
As breach costs reach record highs and defense spending nears $240 billion, owner-run firms are dangerously exposed, threatening supply chain security.
25 Aug 2026
Critical25 Aug 2026
Hospital operator Nutex Health
Healthcare · Records not stated
Healthcare and services provider Nutex is investigating a data breach incident where an unauthorized third party exfiltrated information from company servers.
25 Aug 2026
Medium24 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
The disruption took place amid a wave of attacks targeting vulnerable industrial devices in the water and energy sectors.
24 Aug 2026
Critical24 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
A breach at South Korea's government-backed startup platform exposed encrypted personal data after an encryption key was included in an API. Penta Security explains why encryption keys must be securely managed and kept…
24 Aug 2026
Medium24 Aug 2026
Eduard Kovacs
Technology · Records not stated
Eduard Kovacs reports: Private equity giant Apollo Global Management has disclosed a data breach that exposed sensitive personal information. According to a data breach notice sent to affected individuals, a social…
24 Aug 2026
Medium24 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Yesterday, DataBreaches reported that ShinyHunters had added ReliaQuest to its dedicated leak site, but without any substantive proof, only a few screenshots showing access to a user account on…
24 Aug 2026
High24 Aug 2026
The private equity firm appears to have been
Finance · Records not stated
The private equity firm appears to have been targeted as part of a campaign focusing on major financial companies.
The post Personal Information Exposed in Apollo Global Data Breach appeared first on SecurityWeek.
24 Aug 2026
Medium23 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
UPDATE: Yesterday, DataBreaches reported that ShinyHunters had added ReliaQuest to its dedicated leak site, but without any substantive proof, only a few screenshots showing access to a user account on reliaquest.
23 Aug 2026
High23 Aug 2026
NIUS
Finance · 6,090 records
6,090 records exposed, Bank account numbers, Email addresses, Names, Partial credit card data and 2 more
23 Aug 2026
Critical23 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Akira Hits Safe Mode: Ransomware Rebooting Around EDR…
23 Aug 2026
Medium23 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Iran-linked hackers shut down a UK power plant for four days in the first confirmed attack of its kind, concurrent with water infrastructure attacks across 12 US states. Iran-linked hackers shut down a British power…
23 Aug 2026
Critical23 Aug 2026
MCBS
Healthcare · 1,200,000 records
Data breach affecting 1.2M individuals at Atlanta-based medical business management company
23 Aug 2026
Medium22 Aug 2026
Connecticut
Healthcare · Records not stated
WSFB reports: State officials say a data breach involving the Connecticut Medicaid program’s provider portal exposed payment and claims information tied to roughly 41,000 HUSKY Health members. The Connecticut…
22 Aug 2026
Were you affected?