Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,324
Disclosures in the tracker, all years
2,038
Of those, indexed in 2026
86
Added in October
22
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 21 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

72 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Canada21 Oct 2026Canadian Crime Stoppers AssociationHow they got in: a supplier or vendor that was compromised first.CBC News
  2. Canada19 Oct 2026City of HamiltonThe source does not say how they got in.CBC
  3. Canada17 Oct 2026More RewardsThe source does not say how they got in.CTV News
  4. Canada16 Oct 2026McMurray MétisHow they got in: email made to look like it came from a trusted sender.Yahoo News Canada
  5. Canada14 Oct 2026Nova Scotia minor hockey communityHow they got in: email made to look like it came from a trusted sender.PNI Atlantic News
High1 Jul 2026
Police National Legal Database
Government · Records not stated
135,000 contact records stolen and leaked on dark web by ExfilSquad hacker group
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patients exposed in PEAR ransomware attack on medical billing systems
1 Jul 2026
High1 Jul 2026
KT (South Korea)
Technology · Records not stated
Personal data breach via illegal base stations causing unauthorized micropayment damages
1 Jul 2026
High1 Jul 2026
Valve
Technology · Records not stated
Steam hardware customer data stolen, affecting European customers
1 Jul 2026
Critical1 Jul 2026
Estée Lauder
Retail · Records not stated
Oracle E-Business Suite breach exposed SSNs, passports, health records via Clop campaign
1 Jul 2026
High1 Jul 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Healthcare advocacy vendor cybersecurity incident exposed employee Social Security numbers
1 Jul 2026
High1 Jul 2026
Levi Strauss
Retail · Records not stated
Corporate data stolen via social engineering attack on 3 employee computers
1 Jul 2026
High1 Jul 2026
Cure Dental
Healthcare · Records not stated
Data breach exposed personally identifiable information of current and former patients
1 Jul 2026
High1 Jul 2026
Allstate
Finance · Records not stated
Data breach exposed employee-related records, part of pattern targeting insurers
1 Jul 2026
High1 Jul 2026
KT
Technology · Records not stated
South Korean telecom breach via illegal base stations, personal data and unauthorized micropayment damages
1 Jul 2026
High1 Jul 2026
Huntsville Hospital Health System
Healthcare · Records not stated
Third-party data breach compromised patient data
1 Jul 2026
Critical1 Jul 2026
Instructure
Education · Records not stated
Canvas platform supply chain breach generating 58% of all breach notices in 2026
1 Jul 2026
Critical1 Jul 2026
Coca-Cola Dairy Operations
Retail · Records not stated
Ransomware attack shut down dairy brand operations; data compromised
1 Jul 2026
High1 Jul 2026
fairlife (Coca-Cola)
Retail · Records not stated
Ransomware attack shut down dairy operations
1 Jul 2026
High1 Jul 2026
Cyberattack on law firm
Legal · 13,000 records
Cyberattack on law firm exposed hospital records for nearly 13,000 patients in New Jersey
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patients exposed in PEAR ransomware attack on medical billing system
1 Jul 2026
Critical1 Jul 2026
Coca-Cola (fairlife)
Retail · Records not stated
Ransomware attack shut down dairy operations
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
Healthcare billing company; 1.26 million patient records exposed in PEAR ransomware attack
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patient records exposed in PEAR ransomware attack on healthcare billing company
1 Jul 2026
High1 Jul 2026
River Bank & Trust
Finance · Records not stated
Data stolen in ransomware attack; hackers confirmed data deletion
1 Jul 2026
High1 Jul 2026
Law firm (unnamed)
Legal · 13,000 records
Cyberattack exposed hospital patient records for 13,000 patients in New Jersey to hackers
1 Jul 2026
Critical1 Jul 2026
Instructure Canvas
Education · Records not stated
Supply chain breach generated 58% of 2026 breach notices
1 Jul 2026
Critical1 Jul 2026
Coldcard
Technology · Records not stated
Data breach at Toronto bitcoin hardware wallet company; over $100M in bitcoin stolen
1 Jul 2026
High1 Jul 2026
Exact Sciences/Abbott Diagnostics
Healthcare · Records not stated
Data breach exposed sensitive patient information from at-home diagnostic tests
1 Jul 2026
Were you affected?