Disclosure tracker › Disclosures in 2026
Intelligence · Disclosure tracker
Disclosures in 2026
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,282
Disclosures in the tracker, all years
1,995
Of those, indexed in 2026
41
Added in October
9
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 17 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
3,949 results · Disclosures in 2026. Clear filters
High1 Aug 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
Steam shipping partner CEVA Logistics breach exposed names, addresses, and order data of European hardware customers
1 Aug 2026
High1 Aug 2026
Sensitive data
Government · Records not stated
Sensitive data leak due to woeful security, unpatched CMS and unread alerts
1 Aug 2026
Critical1 Aug 2026
LiteLLM
Technology · Records not stated
AI supply chain attack exposed 2,500+ companies and 434,000 CI/CD pipelines
1 Aug 2026
High1 Aug 2026
HCL Technologies
Technology · Records not stated
Hacker group claimed access to employee data; company disputes claim and states data may be years-old
1 Aug 2026
High1 Aug 2026
CareCloud Inc.
Healthcare · 345,000 records
Cyberattack exposed data on 345,000 patients including protected health information
1 Aug 2026
High1 Aug 2026
Metropolitan Police Service
Government · Records not stated
Data protection failures including unredacted documents sent to stalkers and bulk email breaches
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Coordinated cyberattacks on 30+ renewable energy installations and heat plants; second incident hidden for months
1 Aug 2026
High1 Aug 2026
CareCloud
Healthcare · 345,000 records
Cyberattack and data theft notified more than 345,000 patients of exposure
1 Aug 2026
Critical1 Aug 2026
IEH Corporation
Government · Records not stated
Military device manufacturer disclosed cyber incident affecting products for satellites, missiles, and jets
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
Healthcare billing company; 1.26 million patients exposed in PEAR ransomware attack
1 Aug 2026
High1 Aug 2026
Ransomware attack with data deletion
Finance · Records not stated
Ransomware attack with data deletion confirmation from hacker gang
1 Aug 2026
High1 Aug 2026
New Jersey Law Firm
Legal · 13,000 records
Cyberattack exposed hospital records of nearly 13,000 patients to hackers
1 Aug 2026
Critical1 Aug 2026
Ceva Logistics
Sector not stated · Records not stated
Data breach exposed personal data from multiple companies relying on Ceva for shipping, affecting banks, retailers, and Steam gamers
1 Aug 2026
High1 Aug 2026
Klaviyo
Technology · Records not stated
Marketing tech platform inadvertently shared sign-up information including passwords to dozens of advertisers
1 Aug 2026
Critical1 Aug 2026
Thailand Digital Ministry
Government · Records not stated
221 million exposed login records from state systems
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
UK police, government and customer contact details compromised and exposed on dark web
1 Aug 2026
Critical1 Aug 2026
MCBS Medical Billing
Healthcare · 1,260,000 records
1.26 million patients exposed in PEAR ransomware attack on billing and practice-management company
1 Aug 2026
High1 Aug 2026
Law firm (New Jersey)
Legal · 13,000 records
Cyberattack exposing hospital records and personal information on nearly 13,000 patients
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records of police and government exposed on dark web by ExfilSquad
1 Aug 2026
High1 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack; hackers deleted stolen data after extortion demands
1 Aug 2026
High1 Aug 2026
Data breach
Healthcare · Records not stated
Data breach exposed SSNs and medical records
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records including police and government details leaked on dark web
1 Aug 2026
High1 Aug 2026
T-Mobile
Technology · Records not stated
Data breach exposed customer information; company violated WA notification law using text messages
1 Aug 2026
High1 Aug 2026
PNLD
Government · Records not stated
Police National Legal Database exposed U.K. police and government contact details on dark web
1 Aug 2026
Were you affected?