Disclosure tracker › Disclosures in 2026
Intelligence · Disclosure tracker
Disclosures in 2026
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,278
Disclosures in the tracker, all years
1,992
Of those, indexed in 2026
41
Added in October
9
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 17 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
3,949 results · Disclosures in 2026. Clear filters
Medium20 Jul 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
A newly discovered espionage implant has been using a hijacked Microsoft 365 calendar as its command channel, planting operator instructions and smuggling out stolen files as attachments on calendar events dated to the…
20 Jul 2026
Medium20 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Romania's land registry agency is still recovering from a cyberattack it called "the most serious technical incident in the institution's history."
20 Jul 2026
Medium20 Jul 2026
Hugging Face
Sector not stated · Records not stated
The Hugging Face artificial intelligence repository disclosed that attackers gained access to internal datasets and credentials after breaching its production infrastructure using an autonomous AI agent system.
20 Jul 2026
Critical20 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
On March 18, 2026, Navigate360 learned that 8.3 million anonymous tips had been exposed. The company’s response, and the silence of the programs that depend on its platform, has persisted for months. We’re…
20 Jul 2026
Medium20 Jul 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
Craneware, which is headquartered in Edinburgh and listed on London's AIM market, told investors it detected unauthorized access to a “subset” of its data environment and has since brought in outside…
20 Jul 2026
High20 Jul 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Hackers stole names, addresses, Social Security numbers, credit/debit card numbers, and other information from a third-party management platform.
The post Ernst & Young Data Breach Affects Personal, Financial…
20 Jul 2026
Medium20 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Targeting production infrastructure, the attack compromised internal datasets and service credentials.
The post Hugging Face Hacked in Autonomous AI Attack appeared first on SecurityWeek.
20 Jul 2026
Critical19 Jul 2026
Paidwork
Finance · 23,272,765 records
23,272,765 records exposed, Bank account numbers, Dates of birth, Device information, Education levels and 10 more
19 Jul 2026
Medium17 Jul 2026
Abbott Laboratories is
Sector not stated · Records not stated
Abbott Laboratories is investigating two separate cybersecurity incidents after confirming unauthorized access to internal legacy Exact Sciences systems in its Cancer Diagnostics business, while also investigating a…
17 Jul 2026
Medium17 Jul 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
A Go botnet called NadMesh turned up in early July hunting exposed AI services, and the operator's own dashboard claims 3,811 unique AWS keys.
A public internet indexes harvester keeps the scan queue stocked with ComfyUI, Ollama, n8n…
17 Jul 2026
Medium17 Jul 2026
Ernst & Young
Sector not stated · Records not stated
Ernst & Young is notifying customers of a data breach caused by the compromise of a third-party support ticket system used by its IT personnel.
17 Jul 2026
Medium17 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The company disconnected its systems on July 13 and is starting to gradually restore operations.
The post Cyberattack Disrupts Operations of Japanese Frozen Food Giant Nichirei appeared first on SecurityWeek.
17 Jul 2026
Critical17 Jul 2026
The company
Sector not stated · Records not stated
The company says the incident has not affected product quality and safety, nor Fairlife’s Canada production.
The post Coca-Cola Suspends US Fairlife Production Due to Ransomware Attack appeared first on SecurityWeek.
17 Jul 2026
Critical16 Jul 2026
Coca-Cola
Sector not stated · Records not stated
The Coca-Cola Company disclosed today that a ransomware attack impacting its Fairlife dairy subsidiary has disrupted operations, temporarily suspending production of Fairlife products across the United States.
16 Jul 2026
Medium16 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Nearly two years after a cyberattack disrupted Transport for London’s (TfL) online services and exposed customer data, two…
16 Jul 2026
Medium15 Jul 2026
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Kentucky Fried Chicken restaurants have been left short on ingredients and major restaurant chains struggling to keep up with deliveries following a cyberattack on Nichirei Logistics Group.
15 Jul 2026
Critical15 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Munsif Vengattil and Aditya Kalra Ransomware group World Leaks has posted on the dark web a huge cache of files related to India’s largest nuclear plant, including purported blueprints of parts of its facilities…
15 Jul 2026
High15 Jul 2026
Alex Ebert
Legal · Records not stated
Alex Ebert reports: Wilmer Cutler Pickering Hale & Dorr should pay millions of dollars in damages for loss of clients’ personal information in a May data breach, a putative class action claims. The lawsuit, filed…
15 Jul 2026
High15 Jul 2026
Trevor Long
Healthcare · Records not stated
Trevor Long reports: A large health care chain that owns family medical clinics across Australia has been the victim of a cyber breach which has exposed the data of their patients, including potentially treatment…
15 Jul 2026
High15 Jul 2026
Fluke
Retail · 821,100 records
821,100 records exposed, Email addresses, Employers, Job titles, Names and 2 more
15 Jul 2026
High15 Jul 2026
Goose Creek
Retail · 6,574,121 records
6,574,121 records exposed, Email addresses, Names, Phone numbers, Physical addresses and 1 more
15 Jul 2026
Critical14 Jul 2026
Eduard Kovacs
Sector not stated · 40,000 records
Eduard Kovacs reports: A new ransomware group named D1R in recent days listed Synopsys and Bosch on its Tor-based leak website. The cybercriminals claimed to have exploited a vulnerability in Synopsys’ website to…
14 Jul 2026
Medium14 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The D1R cybercrime group claimed to have stolen valuable data from Synopsys and Bosch, threatening to leak it unless a ransom is paid.
The post Synopsys Finds No Evidence of Data Breach Amid Bosch Hack Claims appeared…
14 Jul 2026
Medium14 Jul 2026
Supermarket giant Lidl has
Sector not stated · Records not stated
Supermarket giant Lidl has revealed details of a supplier breach impacting customer data
14 Jul 2026
Were you affected?