How we report

The rules every record follows

BreachRecords reports what public sources state about breach notices and disclosed incidents. The site makes no finding of its own about cause, fault or the security of any organization. These are the rules the copy and the code enforce.

Every sentence names its source

A record says who published it and when: "Posted on the HHS breach portal with a submission date of Sept. 3, 2026", "Disclosed in a Form 8-K filed Sept. 5, 2026", "Reported to the Texas Attorney General with a notice date of Sept. 3, 2026". The site does not attach a breach to an organization on a date of its own; it says what a source published and the date the source gave.

The source's own words

Category words are quoted as the source wrote them. The HHS portal's "Hacking/IT Incident" stays as written; a filing's "cybersecurity incident" stays as written. The site does not translate a category into a word the source did not use.

Figures belong to their source

A figure is shown with its source, the basis the source gave and the revision date. When sources differ, each figure is shown. Figures are never added together, averaged or chosen between, and a page carries no total of its own.

No verdicts

The site publishes no measure that ranks or judges an organization and uses no word that does. Absence of records is stated as absence from the sources and dates covered, nothing more. The organization in a record is "the organization named"; its identity is the name a source filed or the directory entry a reviewer matched.

A reviewer before every listing

No record, organization, title, description or structured data reaches the site without a reviewer's recorded approval. Matching ranks candidates; a person decides. A record whose source changed after approval shows the approved version with the note "Source updated, under review" until it is approved again.

Corrections on every record

Every organization and incident page has a correction form. No account is needed. We acknowledge every request within two business days. A credible wrong-identity report is suppressed at once while it is reviewed; a dispute is shown as "Disputed, under review" without amending the record; a correction keeps its history on the page.

Evidence first

Every public statement traces to an archived document with its hash, retrieval time and source. Our archived copy is cited first, the source's page second. Archived copies are served only where the source's terms allow it; otherwise the page shows the hash and links to the source. The site never links to a leak site.

Records reflect source filings as of the dates shown. BreachRecords is not a regulator.