Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,491
Disclosures in the tracker, all years
2,079
Of those, indexed in 2026
142
Added in October
19
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 30 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

76 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Australia22 Oct 2026Campbelltown Anglican Schools CouncilThe source does not say how they got in.Cyber Daily
  2. Australia20 Oct 2026AOMEI TechnologyThe source does not say how they got in.SecurityWeek
  3. Australia19 Oct 2026Poole GroupThe source does not say how they got in.Accountants Daily
High1 Jan 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Yearslong data breach of residents' private health-related information exposed
1 Jan 2026
Critical1 Jan 2026
LiteLLM
Technology · Records not stated
Supply chain attack compromising over 2,500 organizations through distribution of information-stealing malware
1 Jan 2026
High1 Jan 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Years-long data breach of residents' private health-related information affecting state health program beneficiaries
1 Jan 2026
Critical1 Jan 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
High-profile data breach; Montana court cleared path for regulatory enforcement action
1 Jan 2026
High1 Jan 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Yearslong data breach of residents' private health-related information discovered
1 Jan 2026
High1 Jan 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Patient data compromised in third-party vendor breach from 2025 Cerner incident
1 Jan 2026
High1 Jan 2026
HCL Technologies
Technology · Records not stated
Hacker group claimed access to employee data; company stated data may be years-old
1 Jan 2026
High1 Jan 2026
Huntsville Hospital
Healthcare · Records not stated
Patient health information compromised through third-party vendor breach
1 Jan 2026
Critical1 Jan 2026
Instructure
Education · Records not stated
Supply chain breach of Canvas platform generated 58% of all breach notices in 2026
1 Jan 2026
Critical1 Jan 2026
Amgen
Healthcare · Records not stated
Hackers accessed cloud environment, stealing patient health data and intellectual property
1 Jan 2026
High1 Jan 2026
Allstate
Finance · Records not stated
Data breach exposed employee-related records in insurance company cyber incident
1 Jan 2026
High1 Jan 2026
Yearslong breach
Healthcare · Records not stated
Yearslong breach exposed residents' private health-related information
1 Jan 2026
High1 Jan 2026
Stack Sports
Technology · Records not stated
Data breach exposed payment details and bank account numbers of users; financial account information compromised
1 Jan 2026
Critical1 Jan 2026
Fortinet FortiGate
Technology · Records not stated
FortiBleed campaign exposed administrative and VPN credentials for 73,932 FortiGate firewalls
1 Jan 2026
High1 Jan 2026
Valve
Technology · Records not stated
Steam hardware customer data stolen via European logistics partner breach
1 Jan 2026
High1 Jan 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Years-long data breach of residents' private health-related information exposed
1 Jan 2026
Critical1 Jan 2026
MCBS
Healthcare · 1,260,000 records
1.26 million patients exposed in PEAR ransomware attack on medical billing system
1 Jan 2026
Critical1 Jan 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Classified networks compromised with China-linked malware via USB drives, undetected for nearly a year
1 Jan 2026
Critical1 Jan 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Inadvertent exposure of personal information for 700,000 state residents
1 Jan 2026
High1 Jan 2026
LexisNexis
Legal · Records not stated
Suspicious server activity led to shutdown of Diligence, Metabase API, and Newsdesk services
1 Jan 2026
High1 Jan 2026
Years-long data breach exposing residents' private health-related information
Government · Records not stated
Years-long data breach exposing residents' private health-related information
1 Jan 2026
Critical1 Jan 2026
IEH Corporation
Government · Records not stated
Microsoft 365 phishing breach exposed mailbox and possibly export-controlled military technology details
1 Jan 2026
High1 Jan 2026
Booz Allen
Technology · Records not stated
Tax records breach at consulting firm; Treasury cuts ties
1 Jan 2026
Critical1 Jan 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Inadvertent exposure of personal information of 700,000 state residents
1 Jan 2026
Were you affected?