Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,305
Disclosures in the tracker, all years
2,019
Of those, indexed in 2026
66
Added in October
18
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 19 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

65 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Australia19 Oct 2026Poole GroupThe source does not say how they got in.Accountants Daily
  2. Australia16 Oct 2026Chadwick SwitchboardsThe source does not say how they got in.Cyber Daily
High22 Sep 2026
Kaplan
Education · Records not stated
Education company reports data breach impacting multiple users
22 Sep 2026
High22 Sep 2026
Lovesac
Retail · Records not stated
Data breach confirmed after ransomware attack
22 Sep 2026
Critical22 Sep 2026
CHC
Healthcare · 1,000,000 records
US healthcare provider breach impacts 1 million patients
22 Sep 2026
High22 Sep 2026
Estée Lauder
Retail · Records not stated
Data breach via Oracle E-Business flaw
22 Sep 2026
High22 Sep 2026
Novocure
Healthcare · Records not stated
Data breach affects more than 1,400 cancer patients
22 Sep 2026
Critical22 Sep 2026
TransUnion
Finance · Records not stated
Over 4 million Americans' personal information including SSNs exposed
22 Sep 2026
Critical22 Sep 2026
Welltok
Healthcare · 14,760,000 records
MOVEit Transfer breach exposed 14.76 million individuals' healthcare data at Denver-based patient health company
22 Sep 2026
High22 Sep 2026
Line Yahoo
Technology · Records not stated
Data leak confirmed after ending Naver ties in Japan
22 Sep 2026
Critical22 Sep 2026
Ransomware attack
Healthcare · 1,200,000 records
Ransomware attack exposed personal data of 1.2 million individuals
22 Sep 2026
Critical22 Sep 2026
Marquis Software Solutions
Finance · Records not stated
Ransomware attack exposed 788,000 financial records including names, addresses, and card numbers
22 Sep 2026
Critical22 Sep 2026
AT&T
Technology · 109,000,000 records
Data breach exposed over 100 million customers across two separate incidents in 2024
22 Sep 2026
Critical22 Sep 2026
Intesa Sanpaolo S.p.A.
Finance · Records not stated
Employee unlawfully accessed customer data for over 2 years; fined €31.8m
22 Sep 2026
Critical22 Sep 2026
MCBS
Healthcare · 1,200,000 records
Data breach at Atlanta-based medical business management company affected 1.2 million individuals
22 Sep 2026
Critical22 Sep 2026
Medical Billing Company (unnamed)
Healthcare · 1,300,000 records
Ransomware attack exposed protected health data on 1.3 million people to dark web
22 Sep 2026
Critical22 Sep 2026
Canadian Tire
Retail · 42,000,000 records
2025 data breach exposed 42 million records
22 Sep 2026
Critical22 Sep 2026
Qantas
Sector not stated · Records not stated
Human error exposed 5.7 million passenger records
22 Sep 2026
Critical22 Sep 2026
Coupang
Retail · 33,700,000 records
Data breach exposed 33.7 million accounts, resulting in $409 million fine from South Korea
22 Sep 2026
High22 Sep 2026
Huntsville Hospital Health System
Healthcare · Records not stated
Third-party data breach exposed patient information at multiple hospital facilities
22 Sep 2026
Critical22 Sep 2026
T-Mobile
Technology · 76,600,000 records
2021 cyberattack exposed data of 76.6 million people including SSNs and driver's license info
22 Sep 2026
Critical22 Sep 2026
EVO Banco (Bankinter)
Finance · 1,270,000 records
API vulnerability exposed financial and identity data of 1.27 million people in Spain
22 Sep 2026
High22 Sep 2026
Veradigm
Healthcare · Records not stated
Third party data breach; hackers threatened to publish exposed data
22 Sep 2026
High22 Sep 2026
Spain's AEPD
Government · Records not stated
First confirmed breach blamed on autonomous AI agent; breach notification filed
22 Sep 2026
Critical22 Sep 2026
Instructure (Canvas platform)
Education · Records not stated
Supply chain breach generated 58% of all breach notices in 2026; affected education sector
22 Sep 2026
High22 Sep 2026
Tishman Speyer
Sector not stated · Records not stated
Data breach exposed Social Security numbers and personal information
22 Sep 2026
Were you affected?