Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,324
Disclosures in the tracker, all years
2,038
Of those, indexed in 2026
86
Added in October
20
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 22 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

72 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Canada21 Oct 2026Canadian Crime Stoppers AssociationHow they got in: a supplier or vendor that was compromised first.CBC News
  2. Canada19 Oct 2026City of HamiltonThe source does not say how they got in.CBC
  3. Canada17 Oct 2026More RewardsThe source does not say how they got in.CTV News
  4. Canada16 Oct 2026McMurray MétisHow they got in: email made to look like it came from a trusted sender.Yahoo News Canada
  5. Canada14 Oct 2026Nova Scotia minor hockey communityHow they got in: email made to look like it came from a trusted sender.PNI Atlantic News
High1 Jun 2026
FirstClass
Retail · Records not stated
Sydney-based travel agency hit by alleged data breach with customer records leaked by threat actor
1 Jun 2026
Critical1 Jun 2026
Canada Life
Finance · 5,500,000 records
5.5 million records allegedly compromised and offered for sale on underground cybercrime forum
1 Jun 2026
High1 Jun 2026
Organisation not named
Education · Records not stated
The disclosure as indexed does not name the organisation.
Second data breach in six months; student records accidentally leaked
1 Jun 2026
High1 Jun 2026
Fortinet
Technology · Records not stated
74,000 Fortinet firewall and VPN gateway credentials stolen from configuration files in FortiBleed leak
1 Jun 2026
Critical1 Jun 2026
Coupang
Retail · 33,700,000 records
Data breach exposed 33.7 million accounts, resulted in $409M fine from South Korea
1 Jun 2026
High1 Jun 2026
Huntsville Hospital Health System
Healthcare · Records not stated
Patient data compromised in third-party breach related to Cerner system
1 Jun 2026
Critical1 Jun 2026
Fortinet
Technology · Records not stated
FortiBleed: 73,932 FortiGate firewall devices exposed with admin and VPN credentials compromised
1 Jun 2026
Critical1 Jun 2026
Novo Nordisk
Healthcare · Records not stated
Cyber extortion group claimed breach; over 1TB of data stolen, $25M extortion attempted
1 Jun 2026
Critical1 Jun 2026
Fortinet
Technology · Records not stated
FortiBleed campaign exposed admin and VPN credentials for 73,932 FortiGate firewalls and VPN gateways
1 Jun 2026
Critical1 Jun 2026
Novo Nordisk
Healthcare · Records not stated
Cyber extortion group claimed theft of over 1 terabyte of data with $25 million extortion attempt
1 Jun 2026
Critical1 Jun 2026
Charter Communications
Technology · 42,000,000 records
Data breach exposed 42 million customer records after ShinyHunters extortion threat
1 Jun 2026
High1 Jun 2026
LastPass
Technology · Records not stated
Data breach confirmed affecting customer data through third-party vendor compromise
1 Jun 2026
Critical1 Jun 2026
Odido
Sector not stated · 6,500,000 records
ShinyHunters stole 6.5M customer records and demanded €1M ransom
1 Jun 2026
High1 Jun 2026
FirstClass
Retail · Records not stated
Travel agency customer records allegedly breached and leaked on underground hacking forums
1 Jun 2026
High1 Jun 2026
Veradigm
Healthcare · Records not stated
Electronic health records company disclosed customer data stolen after hackers infiltrated vendor's systems
1 Jun 2026
High1 Jun 2026
Essex NHS Trust
Healthcare · 900,000 records
Thousands of patient records stolen in cyber attack, disclosed more than six months after notification
1 Jun 2026
Critical1 Jun 2026
Elasticsearch database (unnamed organization)
Technology · Records not stated
Publicly exposed database leaked 24 billion stolen credentials, one of largest infostealer compilations
1 Jun 2026
High1 Jun 2026
Partnered Health
Healthcare · Records not stated
Australian GP network breach exposed patient records reaching dark web
1 Jun 2026
High1 Jun 2026
Huntsville Hospital Health System
Healthcare · Records not stated
Third-party data breach exposed patient information across hospital facilities
1 Jun 2026
Critical1 Jun 2026
Fortinet
Technology · Records not stated
FortiBleed breach exposed credentials for 73,932 FortiGate systems including admin and VPN credentials
1 Jun 2026
High1 Jun 2026
FirstClass
Retail · Records not stated
Australian travel agency customer records allegedly breached by threat actor on underground forums
1 Jun 2026
Critical1 Jun 2026
Medical billing company
Healthcare · 1,300,000 records
2025 ransomware attack exposed sensitive health data on 1.3 million people leaked to dark web
1 Jun 2026
High1 Jun 2026
Partnered Health
Healthcare · Records not stated
Patient records exposed in breach at Australian primary healthcare provider network
1 Jun 2026
Critical1 Jun 2026
Fortinet
Technology · Records not stated
FortiBleed campaign exposed verified administrator credentials and VPN access for over 73,000 FortiGate firewall devices globally
1 Jun 2026
Were you affected?