Live disclosure tracker · updated continuously

Healthcare Data Breaches

Hospitals, clinics, insurers, and medical-IT vendors are the highest-value targets in cybercrime. Below is every healthcare-sector breach LeakTrace has indexed — patient records, HIPAA disclosures, ransomware victims, and supply-chain compromises.

98B+
Records Exposed
11915
Incidents
94+
Countries
+104%
Breach Velocity YoY
Browse by sector
All breaches Healthcare Finance Government Technology Retail Education Legal
Browse by year
2024 2025 2026 2026 Index

Healthcare Data Breaches (11915 indexed)

high · retail · May 30, 2026

Atlas Menu

63,926 records exposed — Email addresses, IP addresses, Passwords, Support tickets and 1 more

View incident → Indexed 3 months ago
high · tech · May 29, 2026

Palo Alto Networks PAN-OS

Palo Alto Networks PAN-OS Authentication Bypass Vulnerability — Palo Alto Networks PAN-OS contains an authentication bypass vulnerability that allows attackers to bypass security restrictions and establish an unauthorize

medium · finance · May 28, 2026

Kemper

269,299 records exposed — Email addresses, Names, Partial credit card data, Phone numbers and 2 more

View incident → Indexed 3 months ago
high · government · May 28, 2026

Charter

4,851,517 records exposed — Email addresses, Job titles, Names, Phone numbers and 1 more

View incident → Indexed 3 months ago
critical · tech · May 27, 2026

Nx Nx Console

Nx Console Embedded Malicious Code Vulnerability — Nx Console contains an embedded malicious code vulnerability that allowed a malicious version of Nx Console to be published. The compromised extension fetched an obfusca

medium · finance · May 27, 2026

Mytheresa

84,108 records exposed — Email addresses, Names, Partial credit card data, Phone numbers and 3 more

View incident → Indexed 3 months ago
critical · tech · May 27, 2026

TanStack TanStack

TanStack Unspecified Vulnerability — TanStack contains an unspecified vulnerability that allowed malicious versions of the product to be published to the npm registry to publish credential-stealing malware under a truste

high · finance · May 26, 2026

Ameriprise

502,597 records exposed — Email addresses, Employers, Financial transactions, Job titles and 3 more

View incident → Indexed 3 months, 1 week ago
high · tech · May 26, 2026

LiteSpeed cPanel Plugin

LiteSpeed cPanel Plugin Privilege Escalation Vulnerability — LiteSpeed cPanel Plugin contains privilege escalation vulnerability that is exposed via the user-end cPanel plugin, which can be abused by any cPanel user acco

View incident → Original disclosure Indexed 3 months, 1 week ago
medium · government · May 24, 2026

7-Eleven

185,256 records exposed — Dates of birth, Email addresses, Names, Phone numbers and 1 more

View incident → Indexed 3 months, 1 week ago
high · tech · May 22, 2026

Drupal Core

Drupal Core SQL Injection Vulnerability — Drupal Core contains a SQL injection vulnerability that could allow for privilege escalation and remote code execution via specially crafted requests sent with the database abstr

View incident → Original disclosure Indexed 3 months, 1 week ago
high · tech · May 21, 2026

Langflow Langflow

Langflow Origin Validation Error Vulnerability — Langflow contains an origin validation error vulnerability in which an overly permissive CORS configuration combined with a refresh token cookie configured as SameSite=Non

View incident → Original disclosure Indexed 3 months, 1 week ago
high · tech · May 21, 2026

Trend Micro Apex One

Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability — Trend Micro Apex One (on-premise) contains a directory traversal vulnerability that could allow a pre-authenticated local attacker to modify a key tab

View incident → Original disclosure Indexed 3 months, 1 week ago
high · tech · May 21, 2026

Dragonica Lunaris

126,293 records exposed — Dates of birth, Email addresses, Names, Passwords and 2 more

View incident → Indexed 3 months, 1 week ago