Live disclosure tracker · updated continuously

Healthcare Data Breaches

Hospitals, clinics, insurers, and medical-IT vendors are the highest-value targets in cybercrime. Below is every healthcare-sector breach LeakTrace has indexed — patient records, HIPAA disclosures, ransomware victims, and supply-chain compromises.

98B+
Records Exposed
10294
Incidents
94+
Countries
+104%
Breach Velocity YoY
Browse by sector
All breaches Healthcare Finance Government Technology Retail Education Legal
Browse by year
2024 2025 2026 2026 Index

Healthcare Data Breaches (10294 indexed)

high · tech · Aug 22, 2026

Golf Canada

568,972 records exposed — Dates of birth, Email addresses, Genders, Geographic locations and 2 more

View incident → Indexed 6 days ago
critical · healthcare · Aug 21, 2026

SickKids data breach

Toronto's Hospital for Sick Children (SickKids) says a cybersecurity incident exposed the personal information of some current and former employees and job applicants, stemming from a flaw in third-party software. Clinic

high · tech · Aug 20, 2026

TrueConf Server

TrueConf Server Missing Authentication for Critical Function Vulnerability — TrueConf Server contains a missing authentication for critical function vulnerability which could allow a remote unauthorized attacker with net

View incident → Original disclosure Indexed 1 week, 1 day ago
high · tech · Aug 20, 2026

TrueConf Server

TrueConf Server Code Injection Vulnerability — TrueConf Server contains a code injection vulnerability that could allow an unauthorized remote attacker with network access via port 4307/TCP to use a specially crafted scr

View incident → Original disclosure Indexed 1 week, 1 day ago
medium · other · Aug 20, 2026

ThreatsDay

A lot of this week’s trouble starts with something trusted doing exactly what it was allowed to do. Signed drivers get turned against defenses. Legitimate apps help malware blend in. A weak header check opens a path to

View incident → Original disclosure Indexed 1 week, 1 day ago
critical · other · Aug 19, 2026

Waqas

Waqas reports: A server mistake by cybercriminals has exposed the inner workings of a global malware operation that used nearly 2,000 hacked WordPress websites to infect computers, steal files and deploy ransomware. Chec

View incident → Original disclosure Indexed 1 week, 2 days ago