Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,329
Disclosures in the tracker, all years
2,043
Of those, indexed in 2026
96
Added in October
23
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 23 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

71 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Australia22 Oct 2026Campbelltown Anglican Schools CouncilThe source does not say how they got in.Cyber Daily
  2. Australia20 Oct 2026AOMEI TechnologyThe source does not say how they got in.SecurityWeek
  3. Australia19 Oct 2026Poole GroupThe source does not say how they got in.Accountants Daily
  4. Australia16 Oct 2026Chadwick SwitchboardsThe source does not say how they got in.Cyber Daily
Critical1 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Hacking group claimed mass data theft from multiple major corporations exploiting software vulnerabilities
1 Aug 2026
Critical1 Aug 2026
LiteLLM (Supply chain)
Technology · Records not stated
2,500+ companies and 434,000 CI/CD pipelines exposed in AI supply chain breach
1 Aug 2026
High1 Aug 2026
CEVA Logistics (Valve partner)
Technology · Records not stated
Names, addresses, and order data of Steam hardware customers in Europe exposed
1 Aug 2026
High1 Aug 2026
Comcast
Technology · 35,000,000 records
Xfinity data breach exposed personal information; Comcast settled class-action lawsuit for $117.5 million
1 Aug 2026
Medium1 Aug 2026
CEVA Logistics / Steam
Technology · Records not stated
CEVA Logistics breach exposed names and addresses of European Steam hardware buyers
1 Aug 2026
Critical1 Aug 2026
Thailand Digital Ministry Systems
Government · Records not stated
221 million login records exposed; MFA mandate sought after identification of breach
1 Aug 2026
Critical1 Aug 2026
Metabase
Technology · Records not stated
ShinyHunters claims hack days after zero-day vulnerability exposed connected databases
1 Aug 2026
Critical1 Aug 2026
LiteLLM/Multiple Organizations
Technology · Records not stated
AI supply chain breach exposed 2500+ companies and 434,000 CI/CD pipelines; terabytes of credentials leaked
1 Aug 2026
High1 Aug 2026
Unpatched CMS and missed
Government · Records not stated
Unpatched CMS and missed alerts led to sensitive data leak
1 Aug 2026
High1 Aug 2026
Coca-Cola (Fairlife)
Retail · Records not stated
Ransomware attack shut down dairy operations; $4 billion brand impacted
1 Aug 2026
High1 Aug 2026
Valve/CEVA Logistics
Technology · Records not stated
Data breach at CEVA Logistics (Valve's European logistics partner) exposed customer names, addresses, and order data
1 Aug 2026
High1 Aug 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
Hackers hit CEVA Logistics shipping partner, exposing names and addresses of Steam hardware buyers in Europe
1 Aug 2026
High1 Aug 2026
Security vulnerabilities led to sensitive data
Government · Records not stated
Security vulnerabilities led to sensitive data leak; uncertain if data was exfiltrated
1 Aug 2026
High1 Aug 2026
Valve (CEVA Logistics partner)
Technology · Records not stated
European logistics partner breached; customer names, addresses, order data exposed for Steam hardware
1 Aug 2026
Critical1 Aug 2026
LiteLLM AI
Technology · Records not stated
Supply chain breach exposed 2,500+ companies and 434,000 CI/CD pipelines with credentials and sensitive data
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Unpatched CMS led to sensitive data leak from criminal records office
1 Aug 2026
Critical1 Aug 2026
Thailand Digital Ministry/Government
Government · Records not stated
221 million login records exposed, prompting MFA mandate push
1 Aug 2026
Critical1 Aug 2026
Coca-Cola Dairy (Sprite/Minute Maid)
Retail · Records not stated
Ransomware attack shut down Coca-Cola's $4 billion dairy brand operations
1 Aug 2026
Critical1 Aug 2026
LiteLLM (AI Supply Chain)
Technology · Records not stated
AI supply-chain attack exposed 2,500+ companies and 434,000 CI/CD pipelines; terabytes of credentials leaked
1 Aug 2026
High1 Aug 2026
fairlife (Coca-Cola)
Retail · Records not stated
Ransomware attack shut down dairy operations; data exposure details not specified
1 Aug 2026
High1 Aug 2026
Valve / CEVA Logistics
Technology · Records not stated
Steam hardware shipping partner breach exposed customer names, addresses, and order data in Europe
1 Aug 2026
High1 Aug 2026
Coca-Cola Fairlife
Retail · Records not stated
Ransomware attack shut down dairy operations resulting in $4B brand disruption
1 Aug 2026
High1 Aug 2026
Sensitive criminal records data
Government · Records not stated
Sensitive criminal records data leaked due to woeful security and unpatched CMS
1 Aug 2026
High1 Aug 2026
Simian
Retail · Records not stated
Groningen-based printing company; hackers accessed Dutch credit card data affecting customers in Netherlands and Belgium
1 Aug 2026
Were you affected?