Disclosure tracker › Disclosures in 2026
Intelligence · Disclosure tracker
Disclosures in 2026
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,292
Disclosures in the tracker, all years
2,005
Of those, indexed in 2026
49
Added in October
9
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 17 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
3,968 results · Disclosures in 2026. Clear filters
High31 Jul 2026
Ernst & Young (EY)
Finance · Records not stated
Third-party vendor breach exposed sensitive tax client data after 81-day notification delay
31 Jul 2026
High31 Jul 2026
Tribeca Film Festival
Sector not stated · 666,000 records
Unprotected database exposed 666,000 records including celebrity contact information
31 Jul 2026
Critical31 Jul 2026
Centers Laboratory
Healthcare · 540,000 records
2025 cyberattack by Worldleaks exposed 540,000 patient records
31 Jul 2026
High31 Jul 2026
Heart South Cardiovascular Group
Healthcare · 46,666 records
Data breach exposed personal and health records of 46,666 patients
31 Jul 2026
Critical31 Jul 2026
Bankinter/EVO Banco
Finance · 1,270,000 records
2024 API vulnerability exposed financial and identity data of 1.27 million records
31 Jul 2026
Critical31 Jul 2026
TriZetto Provider Solutions
Healthcare · 3,400,000 records
Unauthorized access to IT environment exposed PHI of 3.4 million individuals
31 Jul 2026
Critical31 Jul 2026
AT&T
Technology · 109,000,000 records
Data breach exposed data from over 100 million customers across two separate incidents in 2024
31 Jul 2026
High31 Jul 2026
Stack Sports
Technology · Records not stated
Sports platform data breach exposed payment details and bank account information for users
31 Jul 2026
Critical31 Jul 2026
Medical billing company
Healthcare · 1,260,000 records
Medical billing company hit by PEAR ransomware attack, 1.26 million patient records exposed in healthcare billing data breach
31 Jul 2026
High31 Jul 2026
Amgen
Healthcare · Records not stated
Pharmaceutical company Amgen says it suffered a data breach after threat actors stole corporate data and patient information stored in multiple cloud systems operated by third-party service providers.
31 Jul 2026
Medium31 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Anthropic found Claude accessed systems at three real businesses after a testing error gave its AI models live internet access during cybersecurity evaluations.
31 Jul 2026
Critical31 Jul 2026
Weaponizing Exposed Data
Sector not stated · Records not stated
Lab-1 Dark-web Research Team Contributors:Alex Necula, Anastasia Sentasnova, Ellis Stannard, Jeffrey Bell, Manuel Boll, Valéry Rieß-Marchive Mannie W writes: Ransomware and data-extortion groups are moving beyond bulk…
31 Jul 2026
Medium31 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
A Chinese-speaking threat actor is using the DeepSeek AI model and the open-source Hermes Agent to conduct autonomous cyberattacks on exposed servers with limited human involvement.
31 Jul 2026
Medium31 Jul 2026
Anthropic
Sector not stated · Records not stated
Claude maker Anthropic said its AI models escaped test environments and breached networks at three companies on the open internet.
31 Jul 2026
Medium31 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
A security company’s systems were hacked after it installed a malicious Python package deployed by Claude.
The post Prompted by OpenAI Disclosure, Anthropic Finds Its Own Models Hacked 3 Organizations appeared first…
31 Jul 2026
Medium31 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Named CosmosEscape, the vulnerability exposed the primary key for Cosmos DB accounts, granting full read and write access.
The post Critical Flaw Led to Azure Cosmos DB Pwnage appeared first on SecurityWeek.
31 Jul 2026
Medium31 Jul 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
Less than two weeks after OpenAI disclosed that an experimental AI model breached Hugging Face during a cybersecurity evaluation, Anthropic has revealed that its own review uncovered three incidents in which Claude…
31 Jul 2026
High31 Jul 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
In March 2026, hackers stole personal, financial, and medical information from the company’s AWS environment.
The post CareCloud Data Breach Impacts Over 350,000 appeared first on SecurityWeek.
31 Jul 2026
Critical30 Jul 2026
A coordinated attack
Finance · 1,700 records
A coordinated cyberattack that targeted more than 30 Minnesota community water systems has alarmed industrial cybersecurity experts, not because it caused widespread disruption, but because it appears to represent the…
30 Jul 2026
Medium30 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
CISA is urging water and wastewater utilities to lock down internet-exposed controllers, days after intrusions hit dozens of Minnesota systems.
The post CISA Urges Water Sector to Protect OT After Coordinated Attacks…
30 Jul 2026
Medium30 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
In a filing for federal regulators, Massachusetts-based Analog Devices said intruders had exfiltrated data from its networks earlier this summer, but the scope of the incident is still under investigation.
30 Jul 2026
Medium30 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Residential security company Brinks Home has disclosed that hackers breached some of its systems and are threatening to leak allegedly stolen data.
30 Jul 2026
Critical30 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Cyberattack tools and infrastructure used by North Korea’s Lazarus Group appear to have been shared with ransomware criminals targeting South Korean organizations, further evidence of deepening entanglement between…
30 Jul 2026
Medium30 Jul 2026
Analog Devices
Sector not stated · Records not stated
American semiconductor company Analog Devices announced that an unauthorized party accessed some of its systems and exfiltrated certain files.
30 Jul 2026
Were you affected?