Disclosure tracker › Disclosures in 2026
Intelligence · Disclosure tracker
Disclosures in 2026
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,278
Disclosures in the tracker, all years
1,991
Of those, indexed in 2026
37
Added in October
8
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 14 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
3,945 results · Disclosures in 2026. Clear filters
High22 Aug 2026
Golf Canada
Technology · 568,972 records
568,972 records exposed, Dates of birth, Email addresses, Genders, Geographic locations and 2 more
22 Aug 2026
High21 Aug 2026
Organisation not named
Legal · Records not stated
The disclosure as indexed does not name the organisation.
In April, Silent Ransom Group’s (SRG)* leak site listed 38 law firms that had not paid them and whose data was leaked. By June 29, there were 48 law firms. Now there are 64, and, in somewhat surprising claims…
21 Aug 2026
Critical21 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware remains one of the most disruptive cyber threats organizations face. Companies have strengthened their cyber defenses over the years, but attackers in 2026 have become faster, more targeted, and increasingly…
21 Aug 2026
Medium21 Aug 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
The statement came a day after a hacking group calling itself Black Spark claimed it had spent more than a month inside Microolap’s network and gained access to its internal systems, including EtherSensor, the…
21 Aug 2026
Critical21 Aug 2026
SickKids data breach
Healthcare · Records not stated
Toronto's Hospital for Sick Children (SickKids) says a cybersecurity incident exposed the personal information of some current and former employees and job applicants, stemming from a flaw in third-party software.…
21 Aug 2026
High20 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Support is growing for stricter oversight and increased financial resources for utilities in the wake of a cyberattack spree, suspected to be the work of Iran-linked threat groups.
20 Aug 2026
Medium20 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Hackers compromised the maintainer account behind the widely used Rust crate arrayref to introduce malware that executed on developers' systems during compilation.
20 Aug 2026
High20 Aug 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Amar Ćemanović reports: Apple American Group LLC, a major Applebee’s franchise operator in the United States, has disclosed a data breach incident. The event has reportedly exposed sensitive personal information…
20 Aug 2026
Medium20 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
In March 2026, an internal AI agent at Meta triggered a “Sev 1” incident after sensitive company and user data was exposed to employees who weren’t authorized to access it.
The incident began when a Meta…
20 Aug 2026
Critical20 Aug 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
StopAndProtect turned nearly 2,000 hacked WordPress sites into a criminal network for malware delivery, data theft, surveillance and ransomware. Check Point Research uncovered a cybercrime operation, dubbed…
20 Aug 2026
Critical19 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
A suspected ransomware affiliate is posing as a ransomware recovery service called "Ransom Busters," contacting the victims before the attacks become public and claiming to be able to provide decryption keys and delete…
19 Aug 2026
Critical19 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
A suspected ransomware affiliate is posing as a ransomware recovery service called "Ransom Busters," contacting the victims before the attacks become public and claiming to be able to provide decryption keys and delete…
19 Aug 2026
Medium19 Aug 2026
Inside Operation CameraSwarm
Sector not stated · Records not stated
An exposed operator directory reveals how one actor compromised 14,000+ Dahua cameras across Ukraine and Russia, no password needed for most. A researcher discovered an exposed directory containing the tools of an…
19 Aug 2026
Critical19 Aug 2026
Organisation not named
Healthcare · 3,700,000 records
The disclosure as indexed does not name the organisation.
Healthcare software firm CareCloud filed documents with the Department of Health and Human Services confirming that 3,756,469 people had information leaked after a hacker spent eight hours in one of the company’s…
19 Aug 2026
Critical19 Aug 2026
Organisation not named
Sector not stated · 3,700,000 records
The disclosure as indexed does not name the organisation.
U.S. healthcare IT company CareCloud disclosed that the data breach incident it suffered earlier this year has impacted more than 3.7 million individuals.
19 Aug 2026
Critical19 Aug 2026
Sakura Internet hack
Technology · 1,360,000 records
Japanese cloud and data center service provider Sakura Internet disclosed that hackers accessed its sales management system, where customer contract and membership information is stored.
19 Aug 2026
Medium19 Aug 2026
Organisation not named
Sector not stated · 2,616 records
The disclosure as indexed does not name the organisation.
Cybersecurity researchers at Hunt.io have disclosed details of a campaign that they say compromised more than 14,530 Dahua devices between June 17 and July 22, 2026, using credential attacks, two authentication-bypass…
19 Aug 2026
Critical19 Aug 2026
Organisation not named
Government · 1,200,000 records
The disclosure as indexed does not name the organisation.
Latvia’s road traffic agency confirmed that hackers stole data connected to about two-thirds of the country’s population in a major cyberattack that has prompted calls for senior officials to resign.
19 Aug 2026
Critical19 Aug 2026
Justin Timothy
Sector not stated · Records not stated
Justin Timothy reports: The GuidePoint Research and Intelligence Team (GRIT) has responded to several recent ransomware incidents in which victims received an unexpected email from an ostensible third-party entity…
19 Aug 2026
Critical19 Aug 2026
Waqas
Sector not stated · Records not stated
Waqas reports: A server mistake by cybercriminals has exposed the inner workings of a global malware operation that used nearly 2,000 hacked WordPress websites to infect computers, steal files and deploy ransomware.…
19 Aug 2026
High19 Aug 2026
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Cybersecurity researchers have flagged a global cybercrime operation that abuses thousands of hacked WordPress websites as infrastructure to disseminate malware, commandeer infected hosts, store stolen documents…
19 Aug 2026
Critical19 Aug 2026
Organisation not named
Sector not stated · 3,700,000 records
The disclosure as indexed does not name the organisation.
The data breach was initially believed to affect roughly 350,000 people, but the HHS breach tracker shows a far bigger impact.
The post CareCloud Data Breach Impact Grows to 3.7 Million Individuals appeared first on…
19 Aug 2026
High19 Aug 2026
IBM-managed test system (Singapore)
Technology · 70,000 records
Exposed personal information of approximately 70,000 individuals due to supply chain vulnerability
19 Aug 2026
High19 Aug 2026
FRANCE TRAVAIL
Government · Records not stated
Information system hacked; resulted in €5 million fine
19 Aug 2026
Were you affected?