Disclosure tracker › Disclosures in 2026
Intelligence · Disclosure tracker
Disclosures in 2026
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,274
Disclosures in the tracker, all years
1,988
Of those, indexed in 2026
37
Added in October
8
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 14 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
3,945 results · Disclosures in 2026. Clear filters
Critical14 Aug 2026
U.S. Federal Government Agencies
Government · Records not stated
Thousands of civil servants' passwords exposed, including White House-linked credentials
14 Aug 2026
High14 Aug 2026
River Bank & Trust
Finance · Records not stated
Ransomware attack; hackers deleted stolen data after receiving deletion confirmation
14 Aug 2026
High14 Aug 2026
Comcast Xfinity
Technology · 35,000,000 records
Cyberattack exposed personal information of Xfinity customers; $117.5M settlement reached
14 Aug 2026
Medium14 Aug 2026
Hinman Straub
Legal · Records not stated
US law and government relations firm breached by Storm
14 Aug 2026
High14 Aug 2026
Hitachi High-Tech
Technology · Records not stated
Industrial and tech data exfiltrated by CoinbaseCartel
14 Aug 2026
High14 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Hackers breached heat-and-power facility supplying 50,000 residents via private APN access point
14 Aug 2026
High14 Aug 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Patient health information compromised in 2025 breach affecting hospital system
14 Aug 2026
Critical14 Aug 2026
Exposed Credential Elasticsearch DB
Technology · Records not stated
24B stolen credentials exposed publicly
14 Aug 2026
High14 Aug 2026
14 Aug 2026
Critical14 Aug 2026
US Homeland Security
Government · Records not stated
HSIN government network confirmed breached
14 Aug 2026
Critical14 Aug 2026
Snowflake Customer Cluster
Technology · 165,000,000 records
165 orgs breached, billions of records stolen
14 Aug 2026
High14 Aug 2026
14 Aug 2026
High14 Aug 2026
Cambria Law Firm Canada
Legal · Records not stated
INC_RANSOM ransomware, firm data exfiltrated
14 Aug 2026
Medium14 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Records held in Salesforce and ServiceNow systems are under attack leaving user data exposed, according to researchers at Reco.
The attack appears similar to those perpetrated by the extortion group ShinyHunters…
14 Aug 2026
High14 Aug 2026
NHS
Healthcare · 900,000 records
STILL, NHS? Martin Bagot reports: The NHS has admitted a data breach by sending patients’ personal information over pager devices. A BBC investigation found sensitive medical data of transplant patients was routinely…
14 Aug 2026
Medium14 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
AmnesiaStealer contains novel functions, including the attackers gaining remote control over the victim’s browser to steal cookie data
14 Aug 2026
Critical14 Aug 2026
RingCentral data breach
Sector not stated · 1,600,000 records
The ShinyHunters extortion group stole personal information from 1.6 million RingCentral accounts after hacking the company in July, according to the data breach notification service monitored breach databases.
14 Aug 2026
Critical14 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Akira ransomware affiliates were seen using a new technique to evade endpoint detection and response (EDR), where they rebooted a compromised Windows system into Safe Mode with Networking enabled.
According to…
14 Aug 2026
Medium14 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The root cause of the incident is believed to be a compromised AWS access key that was exposed in publicly available JavaScript build artifacts.
The post Over 1,000 Charities Hit by Beacon CRM Data Breach appeared…
14 Aug 2026
Critical14 Aug 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
A former data analyst contractor for Brightly Software has been sentenced to two years in prison for targeting his employer in a $2.5 million extortion scheme.
14 Aug 2026
Medium14 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The Rust-based macOS infostealer harvests users’ passwords, keychain information, Chromium-based browser data, and Safari cookies.
The post AmnesiaStealer macOS Malware Steals Data, Controls Browser Sessions appeared…
14 Aug 2026
Critical14 Aug 2026
Snowflake Breach Guilty Plea
Technology · 165,000,000 records
165 orgs compromised, billions of records stolen
14 Aug 2026
Critical14 Aug 2026
Brightspeed Telecom
Technology · 1,000,000 records
1M+ customer records stolen in ransomware
14 Aug 2026
Critical14 Aug 2026
Exposed Credential Database
Technology · Records not stated
24B stolen credentials in 8.3TB public exposure
14 Aug 2026
Were you affected?