Disclosure tracker › Disclosures in 2026
Intelligence · Disclosure tracker
Disclosures in 2026
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,278
Disclosures in the tracker, all years
1,992
Of those, indexed in 2026
41
Added in October
9
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 17 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
3,949 results · Disclosures in 2026. Clear filters
Critical23 Jul 2026
Nick Hawthorne
Sector not stated · Records not stated
Nick Hawthorne reports: Kootenai County has begun notifying residents whose personal information may have been compromised in a ransomware attack detected on the county’s computer network in late March. According…
23 Jul 2026
Medium22 Jul 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
It’s happened. The nightmare of the future is now in our present. Or was this just old-fashioned negligence? Lily Hay Newman and Dell Cameron report: OpenAI disclosed on Tuesday that it lost control of two AI…
22 Jul 2026
Medium22 Jul 2026
Organisation not named
Education · Records not stated
The disclosure as indexed does not name the organisation.
South Korea disclosed that hackers breached the National Diplomatic Academy's online education system for ten months and stole personal information belonging to current and former employees of the Ministry of Foreign…
22 Jul 2026
Critical22 Jul 2026
Swiss rail vehicle manufacturer Stadler Rail
Finance · Records not stated
Swiss rail vehicle manufacturer Stadler Rail says the Everest ransomware gang demanded about $12.3 million after breaching a data exchange platform shared with one of its suppliers.
22 Jul 2026
Medium22 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Nichirei Logistics Group said warehouse operations and frozen food shipments are returning to normal. A cybercrime gang said it caused the disruption.
22 Jul 2026
High22 Jul 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Hackers leaked names, email addresses, phone numbers, passwords, and financial information stolen from the two platforms.
The post Suno, Paidwork Data Breaches Affect Tens of Millions of Accounts appeared first on…
22 Jul 2026
Medium22 Jul 2026
Hugging Face recently
Sector not stated · Records not stated
Hugging Face recently disclosed a security breach. OpenAI has now said that it was its AI models which broke containment and hacked Hugging Face themselves
22 Jul 2026
Medium22 Jul 2026
The admission comes days after Hugging Face
Sector not stated · Records not stated
The admission comes days after Hugging Face disclosed an attack powered by autonomous AI agents.
The post OpenAI Says Its AI Models Broke Loose and Hacked Hugging Face appeared first on SecurityWeek.
22 Jul 2026
Medium22 Jul 2026
Chick-fil-A
Retail · Records not stated
American fast food restaurant chain Chick-fil-A is notifying customers of a data breach after their accounts were hacked in a wave of recent credential stuffing attacks.
22 Jul 2026
Medium22 Jul 2026
OpenAI
Sector not stated · Records not stated
OpenAI says its AI models, including GPT‑5.6 Sol and a pre-release model, hacked into the Hugging Face artificial intelligence repository while being tested in a sandboxed testing environment.
22 Jul 2026
Medium22 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Milford, New Hampshire is a quintessential New England town. But charm is no defense against cyberattackers, and it appears that the town may have been attacked last week. As DysruptionHub was the first to report, the…
22 Jul 2026
Critical21 Jul 2026
Colin Wood
Government · Records not stated
Colin Wood reports: At least one municipal government was among those to see their internet service disrupted after a cyberattack against a Maine telecommunications firm Sunday caused an outage affecting 23 towns along…
21 Jul 2026
Critical21 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The Anubis ransomware gang has claimed responsibility for the cyberattack on Coca-Cola's Fairlife dairy subsidiary, threatening to publish allegedly stolen corporate data unless the company pays a ransom.
21 Jul 2026
Critical21 Jul 2026
Kim Eun-bi
Government · Records not stated
Kim Eun-bi reports: The Seoul Metropolitan Government will send individual text messages to about 4.62 million citizens affected by a data breach involving membership information for Ttareungyi, the city’s public…
21 Jul 2026
Medium21 Jul 2026
Seo Ji-Eun
Sector not stated · Records not stated
Seo Ji-Eun reports: The personal information of nearly all of South Korea’s diplomatic personnel is presumed to have been compromised in what the Foreign Ministry on Tuesday called an “unprecedented”…
21 Jul 2026
Medium21 Jul 2026
The website was
Sector not stated · Records not stated
The website was hacked on Saturday, when its homepage was replaced with a message displaying a cryptocurrency wallet address and threatening to publish unspecified information about President William Ruto unless the…
21 Jul 2026
Medium21 Jul 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Using social engineering, hackers compromised employee accounts with access to personal and health information.
The post Clover Health Investments Discloses Data Breach appeared first on SecurityWeek.
21 Jul 2026
Medium20 Jul 2026
An AI-led cyberattack
Sector not stated · Records not stated
An AI-led cyberattack breached limited Hugging Face datasets and service credentials, while public models, Spaces and published packages showed no signs of tampering.
20 Jul 2026
Medium20 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Cosmetics giant Estée Lauder is notifying customers of a data breach after hackers exploited a flaw in Oracle E-Business Suite that the company used for human resources (HR) operations.
20 Jul 2026
Critical20 Jul 2026
Suno
Finance · 55,282,226 records
55,282,226 records exposed, Email addresses, Names, Partial credit card data, Phone numbers and 2 more
20 Jul 2026
Medium20 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Documents that the World Leaks cybercrime group claimed to leak from the Kudankulam Nuclear Power Plant do not contain information pertaining to safety or security, Indian officials said.
20 Jul 2026
Critical20 Jul 2026
Organisation not named
Government · 1,048 records
The disclosure as indexed does not name the organisation.
A malware operator left its delivery server wide open, and Rapid7 pulled down the whole toolkit: 1,048 files spanning lure templates, filename-spoofing tests, execution experiments, droppers, builder notes, and two…
20 Jul 2026
Medium20 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
A malicious component dubbed HollowGraph uses the calendar feature in compromised Microsoft 365 mailboxes as a command-and-control channel to receive attacker commands and exfiltrate stolen data.
20 Jul 2026
Medium20 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
A single request should not be able to do this much. But this week, small inputs led to code execution, memory loss, stolen keys, and disabled security tools.
The paths were often simple: exposed systems, weak checks…
20 Jul 2026
Were you affected?