Disclosure tracker › Disclosures in 2026
Intelligence · Disclosure tracker
Disclosures in 2026
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,278
Disclosures in the tracker, all years
1,992
Of those, indexed in 2026
41
Added in October
9
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 17 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
3,949 results · Disclosures in 2026. Clear filters
Critical28 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The hacker claimed to have stolen the information of 2 million Origin Energy customers after breaching its systems.
The post Origin Energy Data Breach Affects 900,000 Australians appeared first on SecurityWeek.
28 Jul 2026
Medium28 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Decades after it appeared in “The Terminator,” Skynet looks more like a forecast of the cyber incident in which a rogue AI system hacked into another AI company on its own.
The post For Some, So-Called ‘Skynet Day’…
28 Jul 2026
Medium27 Jul 2026
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Three times may be a charm for some things, but not for data security incidents. Frontier Airlines allegedly has had a third data security incident this year. First, it was BobDaHacker publishing a blog post on June 16…
27 Jul 2026
Medium27 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The ShinyHunters extortion gang has claimed responsibility for a recently disclosed Ernst & Young data breach, saying it obtained credentials for some of the company's systems via a supply-chain attack.
27 Jul 2026
Medium27 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Monday starts with the usual promise that everything is under control. Then the logs wake up.
This week, trusted tools crossed lines, old flaws found new work, exposed systems stayed exposed, and attackers kept hiding…
27 Jul 2026
Critical27 Jul 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
The Anubis cybercrime group has taken credit for the attack and is threatening to leak data.
The post Coca-Cola Confirms Data Breach After Fairlife Ransomware Attack appeared first on SecurityWeek.
27 Jul 2026
Medium27 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
A threat actor has been using the compromised appliances to target the Microsoft 365 accounts of traveling corporate employees.
The post Hacked Public Wi-Fi Gateways Used to Harvest Corporate Credentials appeared first…
27 Jul 2026
Critical27 Jul 2026
Organisation not named
Healthcare · 23,000,000 records
The disclosure as indexed does not name the organisation.
In May 2026, hackers stole personal and dental health information from DentaQuest’s computer network.
The post DentaQuest Data Breach Potentially Impacts Over 23 Million People appeared first on SecurityWeek.
27 Jul 2026
Critical27 Jul 2026
Organisation not named
Healthcare · 1,200,000 records
The disclosure as indexed does not name the organisation.
The PEAR ransomware group claimed to have stolen 3 TB of information from the medical business management company.
The post MCBS Data Breach Affects 1.2 Million Individuals appeared first on SecurityWeek.
27 Jul 2026
High25 Jul 2026
Jessica Lyons
Technology · Records not stated
Jessica Lyons reports on today’s entry in the “No Need to Hack When It’s Leaking” files: Click To Pray, a prayer app endorsed by the Pope with hundreds of thousands of users worldwide, has…
25 Jul 2026
Medium25 Jul 2026
ShinyHunters data
Sector not stated · Records not stated
Threat actors are using email addresses exposed in data breaches leaked by the ShinyHunters extortion group to send sextortion emails demanding $2,000 in Bitcoin.
25 Jul 2026
Medium24 Jul 2026
OnTrac
Sector not stated · Records not stated
OnTrac parcel delivery company is informing that hackers breached its corporate network and may have accessed personal details belonging to its customers.
24 Jul 2026
Medium24 Jul 2026
Chick-fil-A has
Technology · 13,000 records
Chick-fil-A has confirmed that over 13,000 customers had their accounts breached in a wave of credential stuffing attacks targeting its website and mobile app between June 17 and June 19.
24 Jul 2026
Medium24 Jul 2026
Bob Chiarito
Education · Records not stated
Bob Chiarito reports: Six weeks after a cyberattack shut down the campus for two days, several Evanston Township High School students received phishing emails this week. The emails offered students part-time jobs…
24 Jul 2026
Medium24 Jul 2026
Roxanne Libatique
Finance · Records not stated
Roxanne Libatique reports: Origin Energy has declined to comment on a public claim that it privately resolved a cyber extortion threat, a posture that, as of July 24, leaves the company managing simultaneous…
24 Jul 2026
Critical24 Jul 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
Previous reporting about the Navigate360 breach focused on tips submitted by students, teachers, and parents. In this article, we focus on tips submitted to Crime Stoppers and law enforcement-related programs that use…
24 Jul 2026
Critical24 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The Clop ransomware gang (also tracked as Cl0p) is targeting Internet-exposed PTC Windchill and FlexPLM instances in a new data theft extortion campaign.
24 Jul 2026
Critical24 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
A hacker claims to have stolen the information of 2 million Origin Energy customers and is threatening to leak it.
The post Data Breach Confirmed After Australian Energy Giant Origin Is Hacked appeared first on…
24 Jul 2026
Medium23 Jul 2026
Australian energy provider Origin
Sector not stated · Records not stated
Origin Energy has confirmed that an unauthorized party accessed and subsequently leaked customer data online, exposing sensitive personally identifiable information (PII), among others.
23 Jul 2026
Critical23 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
An exposed Alibaba Cloud server has revealed a China-nexus operation that Group-IB tracks as JadeProx. The cluster has targeted government, healthcare, and education organizations across Asia and Latin America with a…
23 Jul 2026
Medium23 Jul 2026
Major Australian energy supplier
Sector not stated · Records not stated
Origin Energy said it was working to figure out how many Australians were affected by a recent data breach.
23 Jul 2026
Critical23 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Hackers recently obtained non-sensitive customer information and other documents from the company.
The post Upbound Group Says Data Breach Led to $13 Million in Fraudulent Contract Losses appeared first on SecurityWeek.
23 Jul 2026
Critical23 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
A cyberattack on a food and logistics firm disrupts the supply of frozen food to thousands of clients, including major franchises like Kentucky Fried Chicken.
23 Jul 2026
Medium23 Jul 2026
Camellia Burris
Education · Records not stated
Camellia Burris reports: One Middle Tennessee school district is delaying the start of the school year due to a data breach in its computer network. School officials in Sumner County discovered the breach in its…
23 Jul 2026
Were you affected?