Disclosure tracker › Disclosures in 2026
Intelligence · Disclosure tracker
Disclosures in 2026
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,280
Disclosures in the tracker, all years
1,993
Of those, indexed in 2026
39
Added in October
7
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 16 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
3,947 results · Disclosures in 2026. Clear filters
Critical11 Aug 2026
Snowflake Platform Breach
Technology · 165,000,000 records
165 orgs hit, billions of records stolen
11 Aug 2026
High11 Aug 2026
Barclay Damon Law Firm
Legal · Records not stated
Internal legal data exfiltrated by BusinessDataLeaks
11 Aug 2026
Critical11 Aug 2026
11 Aug 2026
Critical11 Aug 2026
Alcon Pharma
Healthcare · Records not stated
25M Salesforce PII records stolen by ShinyHunters
11 Aug 2026
Critical11 Aug 2026
Questal IT Services
Technology · Records not stated
21M Salesforce PII records stolen by ShinyHunters
11 Aug 2026
Critical11 Aug 2026
100K+ officer and staff contact records exposed
Government · Records not stated
100K+ officer and staff contact records exposed
11 Aug 2026
Critical11 Aug 2026
Canvas Instructure
Education · 275,000,000 records
275M users compromised across 8,800 institutions
11 Aug 2026
Medium10 Aug 2026
Organisation not named
Legal · Records not stated
The disclosure as indexed does not name the organisation.
Atlassian’s enterprise AI assistant Rovo, which is usually connected across sensitive work environments like Slack, Microsoft 365, and Google Workspace, was found vulnerable to data leaks through malicious instructions.
10 Aug 2026
Medium10 Aug 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
Three separate research efforts last week demonstrated ways to defeat passkey protections without breaking the cryptography they rest on.
Passkeys are designed to replace reusable passwords and resist phishing. The…
10 Aug 2026
Medium10 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The current GPT-5.6-Sol has been assigned a ‘high’ cybersecurity threshold, but Astra could reach the maximum ‘critical’ threshold.
The post OpenAI’s Upcoming Astra Model Raises Autonomous Cyberattack Concerns…
10 Aug 2026
Medium10 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The incident occurred on the same day as coordinated cyberattacks struck more than 30 other renewable energy installations and a larger heat plant, as Poland publicly disclosed in January.
10 Aug 2026
Critical10 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Breached via private APN; supplies heat to approximately 50,000 residents
10 Aug 2026
High10 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Heat and power facility supplying 50,000 residents breached via private APN exploitation
10 Aug 2026
High10 Aug 2026
7-Eleven
Retail · Records not stated
Data breach exposed current, former, and prospective franchisees' detailed application packages
10 Aug 2026
High10 Aug 2026
Ontario Health atHome
Healthcare · Records not stated
Vendor ransomware attack exposed data, kept under wraps for months
10 Aug 2026
Critical10 Aug 2026
Fortinet FortiGate Systems
Technology · Records not stated
73,932 FortiGate firewall credentials exposed including admin and VPN credentials
10 Aug 2026
Critical10 Aug 2026
135K law enforcement contacts leaked to dark web
Government · Records not stated
135K law enforcement contacts leaked to dark web
10 Aug 2026
Critical10 Aug 2026
US Civil Service/White House
Government · Records not stated
Thousands of civil servants' passwords exposed including White House-linked credentials since early 2024
10 Aug 2026
High10 Aug 2026
KT
Technology · Records not stated
Personal data breach via illegal base stations caused unauthorized micropayments; fined 53.9 billion won
10 Aug 2026
High10 Aug 2026
US Government civil services
Government · Records not stated
Thousands of civil servants' passwords exposed including White House linked credentials since early 2024
10 Aug 2026
Critical10 Aug 2026
100K+ officers and staff contacts exposed
Government · Records not stated
100K+ officers and staff contacts exposed
10 Aug 2026
Critical10 Aug 2026
CareCloud Health
Healthcare · 350,000 records
350K patients: SSNs, financials, medical records stolen
10 Aug 2026
Critical10 Aug 2026
10 Aug 2026
Critical10 Aug 2026
VITAS Hospice Services
Healthcare · 300,000 records
300K patient records with SSNs and medical data
10 Aug 2026
Were you affected?