Disclosure tracker › Disclosures in 2026
Intelligence · Disclosure tracker
Disclosures in 2026
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,276
Disclosures in the tracker, all years
1,989
Of those, indexed in 2026
34
Added in October
11
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 13 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
3,942 results · Disclosures in 2026. Clear filters
High25 Sep 2026
Pierce County Library
Sector not stated · 340,000 records
340,000 people impacted by data breach
25 Sep 2026
High25 Sep 2026
Columbia University
Education · 860,000 records
860,000 records exposed in data breach
25 Sep 2026
Critical25 Sep 2026
Canadian Tire
Retail · 38,000,000 records
38 million accounts compromised in data breach
25 Sep 2026
High25 Sep 2026
Covenant Health
Healthcare · 480,000 records
Data breach impacts nearly 480,000 individuals
25 Sep 2026
Critical25 Sep 2026
700Credit
Finance · 5,800,000 records
Data breach impacts 5.8 million individuals
25 Sep 2026
Critical25 Sep 2026
Prosper
Finance · 10,000,000 records
Data breach affecting approximately 10 million records
25 Sep 2026
High25 Sep 2026
Kaplan
Education · Records not stated
Education company data breach impacting customers
25 Sep 2026
High25 Sep 2026
Substack
Technology · Records not stated
Newsletter platform notifies users of data breach
25 Sep 2026
Critical25 Sep 2026
US Healthcare Provider (CHC)
Healthcare · 1,000,000 records
Data breach impacting 1 million patients exposed
25 Sep 2026
Critical25 Sep 2026
T-Mobile
Technology · 76,600,000 records
Cyberattack exposed 76.6 million people including SSNs and driver's license info
25 Sep 2026
Critical25 Sep 2026
Kirkland & Ellis
Legal · Records not stated
Law firm affected by MOVEit data breach affecting sensitive client data
25 Sep 2026
Critical25 Sep 2026
Welltok
Healthcare · 14,760,000 records
MOVEit Transfer vulnerability exploitation exposed 14.76 million individuals' patient data
25 Sep 2026
High25 Sep 2026
Mizuno
Retail · Records not stated
Confirmed data breach after 2024 ransomware attack; customer data exposed
25 Sep 2026
Critical25 Sep 2026
Meta
Technology · Records not stated
2018 data breach; EU privacy regulator fined Meta 251 million euros for personal data exposure
25 Sep 2026
Critical25 Sep 2026
Free Mobile and Free
Technology · Records not stated
2024 data breach exposing customer data; French regulator CNIL fined €42-49 million for security vulnerabilities and GDPR violations
25 Sep 2026
Critical25 Sep 2026
Ransomware attack
Healthcare · 1,200,000 records
Ransomware attack exposed personal data of 1.2 million individuals
25 Sep 2026
High25 Sep 2026
US Bank
Finance · Records not stated
Data breach investigated following LockBit ransomware group claim with threat to publish stolen data
25 Sep 2026
Critical25 Sep 2026
Intesa Sanpaolo SpA
Finance · Records not stated
Employee unauthorized access over two years; insider threat resulted in €31.8m fine for data protection failures
25 Sep 2026
High25 Sep 2026
Miljödata
Technology · 2,200,000 records
2.2 million records exposed including sick leave and school data from HR software vendor
25 Sep 2026
Critical25 Sep 2026
Coupang
Retail · 33,700,000 records
33.7 million accounts exposed, resulted in $409 million South Korea fine
25 Sep 2026
Critical25 Sep 2026
Qantas
Sector not stated · 5,670,000 records
Vishing attack via fake IT support exposed 5.67 million customer records
25 Sep 2026
Critical25 Sep 2026
Bankinter/EVO Banco
Finance · Records not stated
API vulnerability exposed 1.27 million financial and identity records in Spain
25 Sep 2026
Medium25 Sep 2026
Cyberattack
Government · Records not stated
Dyfed-Powys Police in Wales said a cyberattack affecting the force disrupted some non-emergency systems and may have compromised staff information.
25 Sep 2026
Critical24 Sep 2026
Organisation not named
Healthcare · 1,200,000 records
The disclosure as indexed does not name the organisation.
2025 ransomware attack exposed personal data of 1.2 million individuals
24 Sep 2026
Were you affected?