Disclosure tracker › Disclosures in 2026
Intelligence · Disclosure tracker
Disclosures in 2026
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,278
Disclosures in the tracker, all years
1,992
Of those, indexed in 2026
41
Added in October
9
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 16 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
3,949 results · Disclosures in 2026. Clear filters
High7 Aug 2026
Law firm (unspecified)
Legal · 13,000 records
Cyberattack on law firm representing hospitals exposed records of approximately 13,000 patients in New Jersey
7 Aug 2026
Critical7 Aug 2026
Bankinter
Finance · 1,270,000 records
EVO Banco data breach via API vulnerability exposed financial and identity data of 1.27 million individuals
7 Aug 2026
Critical7 Aug 2026
Exposed Credential Database
Sector not stated · Records not stated
24B stolen credential records publicly exposed
7 Aug 2026
Critical7 Aug 2026
Conduent Business Solutions
Sector not stated · 62,000,000 records
62M records exposed to federal regulators
7 Aug 2026
Medium7 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
BlackFile has rebranded as Redact after an alleged affiliate hijack, with Google linking the group to ongoing vishing and extortion campaigns
7 Aug 2026
Critical7 Aug 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
On March 24, 2026, developers building AI applications with LiteLLM, a Python package with 95 million monthly downloads, unknowingly installed malicious code. A threat actor group known as TeamPCP had compromised the…
7 Aug 2026
Medium7 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Initially calling itself BlackFile, the group has expanded operations to the Redact, Pink, Helix, and Falcon brands.
The post Vishing Extortion Group UNC6671 Rebrands After Making Millions appeared first on SecurityWeek.
7 Aug 2026
Critical7 Aug 2026
Exact Sciences
Healthcare · 10,869,543 records
10,869,543 records exposed, Dates of birth, Email addresses, Genders, Names and 3 more
7 Aug 2026
High7 Aug 2026
7 Aug 2026
Critical7 Aug 2026
Unlimited Systems Health IT
Healthcare · 442,000 records
442K patient records exposed in ransomware attack
7 Aug 2026
Critical7 Aug 2026
Exposed Credential Superdb
Technology · Records not stated
24B stolen credential records publicly exposed
7 Aug 2026
Critical7 Aug 2026
Basic-Fit Gym Operator
Finance · Records not stated
1M members' bank and personal data breached
7 Aug 2026
High7 Aug 2026
PNLD UK Police Network
Government · Records not stated
Police and government contacts published on dark web
7 Aug 2026
Critical7 Aug 2026
France Titres ANTS
Government · Records not stated
11.7M government portal accounts compromised
7 Aug 2026
Critical7 Aug 2026
Federal intel-sharing network
Government · Records not stated
Federal intel-sharing network breached for weeks
7 Aug 2026
Critical7 Aug 2026
NYC Health + Hospitals
Healthcare · 1,800,000 records
1.8M records with biometrics and SSNs stolen
7 Aug 2026
High6 Aug 2026
Kirkland & Ellis
Legal · Records not stated
Law firm pulled into litigation over MOVEit data breach
6 Aug 2026
High6 Aug 2026
Evolve Bank
Finance · Records not stated
Data breach affecting third-party fintech company customers including Wise
6 Aug 2026
High6 Aug 2026
T-Mobile
Technology · Records not stated
Data breach affecting hundreds of thousands of Washington customers, notification law violations
6 Aug 2026
Critical6 Aug 2026
EVO Banco/Bankinter
Finance · 1,270,000 records
1.27 million records exposed via 2024 API vulnerability; financial and identity data compromised
6 Aug 2026
Critical6 Aug 2026
U.S. Government Civil Service
Government · Records not stated
Thousands of civil servants' passwords compromised since early 2024, including White House-linked credentials
6 Aug 2026
Medium6 Aug 2026
Platinum Technology
Government · Records not stated
Data incident exposed voter information in Sangamon County; no election system impact reported
6 Aug 2026
High6 Aug 2026
Law firm (unnamed)
Legal · 13,000 records
Breach exposed hospital patient records for 13K patients in New Jersey
6 Aug 2026
High6 Aug 2026
Allstate
Finance · Records not stated
Data breach exposed employee-related records in insurance company incident
6 Aug 2026
Were you affected?