Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,314
Disclosures in the tracker, all years
2,028
Of those, indexed in 2026
76
Added in October
21
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 21 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

72 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Canada21 Oct 2026Canadian Crime Stoppers AssociationHow they got in: a supplier or vendor that was compromised first.CBC News
  2. Canada19 Oct 2026City of HamiltonThe source does not say how they got in.CBC
  3. Canada17 Oct 2026More RewardsThe source does not say how they got in.CTV News
  4. Canada16 Oct 2026McMurray MétisHow they got in: email made to look like it came from a trusted sender.Yahoo News Canada
  5. Canada14 Oct 2026Nova Scotia minor hockey communityHow they got in: email made to look like it came from a trusted sender.PNI Atlantic News
Critical1 Jul 2026
Estée Lauder
Retail · Records not stated
Data breach via Oracle E-Business Suite exposure of SSNs, passports, and health records (Clop campaign)
1 Jul 2026
Critical1 Jul 2026
Amgen
Healthcare · Records not stated
Hackers accessed cloud environment, stealing patient health data and proprietary company information
1 Jul 2026
Critical1 Jul 2026
Origin Energy
Sector not stated · 2,000,000 records
Hacker claimed to steal information of 2 million customers from Australian energy giant
1 Jul 2026
High1 Jul 2026
Bank of Baroda
Finance · Records not stated
Employee email account compromised allowing unauthorized access to certain data
1 Jul 2026
High1 Jul 2026
Hugging Face
Technology · Records not stated
Breach affected internal datasets and credentials, users urged to rotate access tokens
1 Jul 2026
Critical1 Jul 2026
Accenture
Technology · Records not stated
Data breach with 35GB of internal data stolen including source code and credentials
1 Jul 2026
High1 Jul 2026
Fairlife (Coca-Cola)
Retail · Records not stated
Ransomware attack affected production-related systems at dairy unit
1 Jul 2026
High1 Jul 2026
Clover Health
Healthcare · Records not stated
Health insurer data breach; type and volume of exposed data still unknown
1 Jul 2026
High1 Jul 2026
Craneware
Healthcare · Records not stated
Hospital software vendor breach; supply-chain attack exposed customer data
1 Jul 2026
High1 Jul 2026
KT
Technology · Records not stated
Personal data breach and unauthorized micropayment damages caused by illegal base stations
1 Jul 2026
Critical1 Jul 2026
Suno
Technology · 55,000,000 records
Hackers stole names, phone numbers, and physical addresses of 55M users
1 Jul 2026
High1 Jul 2026
KT Corp
Technology · Records not stated
Rogue femtocell breach exposed 16,647 subscribers and stole SMS payment information
1 Jul 2026
Critical1 Jul 2026
Mount Royal University
Education · Records not stated
CMD Organization stole and deleted 10 TB in ransomware attack, demanded $1.9M ransom
1 Jul 2026
High1 Jul 2026
Partnered Health
Healthcare · Records not stated
Patient records stolen in cyberattack on Australian healthcare provider affecting 21 clinics
1 Jul 2026
High1 Jul 2026
Ernst & Young
Legal · Records not stated
Breach exposed client tax records and financial information
1 Jul 2026
High1 Jul 2026
Abbott Laboratories
Healthcare · Records not stated
Cyber incident under investigation affecting medical device company
1 Jul 2026
High1 Jul 2026
Network intrusion on Homeland Security Information Network
Government · Records not stated
Network intrusion on Homeland Security Information Network confirmed after two false positives
1 Jul 2026
High1 Jul 2026
Hugging Face
Technology · Records not stated
Internal datasets and credentials exposed; users urged to rotate access tokens
1 Jul 2026
Critical1 Jul 2026
Accenture
Technology · Records not stated
35GB of internal data stolen including source code and credentials
1 Jul 2026
High1 Jul 2026
LVM (Latvian forestry company)
Sector not stated · Records not stated
State-owned forestry company still restoring systems weeks after ransomware attack
1 Jul 2026
High1 Jul 2026
Fairlife (Coca-Cola)
Retail · Records not stated
Ransomware attack on Coca-Cola's dairy unit affecting production-related systems; operations forced offline
1 Jul 2026
High1 Jul 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack with hackers claiming data deletion; financial institution impacted
1 Jul 2026
High1 Jul 2026
Clover Health
Healthcare · Records not stated
Insurer disclosed data breach; extent of data exposure and record count not yet determined
1 Jul 2026
Critical1 Jul 2026
Craneware
Healthcare · Records not stated
Hospital software vendor breach exposing customer healthcare data through supply-chain attack
1 Jul 2026
Were you affected?