Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,324
Disclosures in the tracker, all years
2,038
Of those, indexed in 2026
86
Added in October
20
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 22 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

72 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Canada21 Oct 2026Canadian Crime Stoppers AssociationHow they got in: a supplier or vendor that was compromised first.CBC News
  2. Canada19 Oct 2026City of HamiltonThe source does not say how they got in.CBC
  3. Canada17 Oct 2026More RewardsThe source does not say how they got in.CTV News
  4. Canada16 Oct 2026McMurray MétisHow they got in: email made to look like it came from a trusted sender.Yahoo News Canada
  5. Canada14 Oct 2026Nova Scotia minor hockey communityHow they got in: email made to look like it came from a trusted sender.PNI Atlantic News
High1 Jun 2026
LastPass
Technology · Records not stated
Customer data exposed in third-party vendor security breach
1 Jun 2026
Critical1 Jun 2026
Charter Communications
Technology · 42,000,000 records
42 million customer records exposed in data breach by ShinyHunters extortion group
1 Jun 2026
Critical1 Jun 2026
Fortinet
Technology · Records not stated
FortiBleed campaign exposing valid administrative and VPN credentials for 73,932 FortiGate firewalls
1 Jun 2026
High1 Jun 2026
Baylor Genetics
Healthcare · Records not stated
June breach exposed patient genetic data and employee information in healthcare organization
1 Jun 2026
Medium1 Jun 2026
DC Housing Authority
Government · Records not stated
Cybersecurity incident in June resulted in limited sensitive information compromise
1 Jun 2026
Critical1 Jun 2026
Charter Communications
Technology · 42,000,000 records
Data breach exposes 42 million customer records after ShinyHunters extortion threat
1 Jun 2026
Critical1 Jun 2026
Fortinet FortiGate
Technology · Records not stated
Credentials for 73,932 FortiGate firewalls exposed in FortiBleed campaign
1 Jun 2026
Critical1 Jun 2026
Baylor Genetics
Healthcare · Records not stated
June breach compromised sensitive patient genetic data and employees' information
1 Jun 2026
Critical1 Jun 2026
Charter Communications
Technology · 42,000,000 records
Data breach exposes 42 million customer records; ShinyHunters extortion group threatened release
1 Jun 2026
High1 Jun 2026
LastPass
Technology · Records not stated
Data breach confirmed via third-party vendor compromise exposing customer data
1 Jun 2026
Critical1 Jun 2026
Aflac Japan
Finance · 1,300,000 records
Data breach exposed 4.38 million customers in June 2026, second major hack in over a year
1 Jun 2026
Critical1 Jun 2026
Canada Life
Finance · 5,500,000 records
Threat actor claims 5.5 million records exposed, customer/employee/corporate data
1 Jun 2026
High1 Jun 2026
FirstClass
Sector not stated · Records not stated
Sydney-based travel agency customer records allegedly breached, details posted on underground forums
1 Jun 2026
Critical1 Jun 2026
Puerto Rico Government Agency
Government · Records not stated
Government mapping service exposed 1 million Social Security numbers
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Thousands of patient records stolen in ransomware attack, breach disclosed 6+ months after notification
1 Jun 2026
Critical1 Jun 2026
Elasticsearch (Infostealer logs)
Technology · Records not stated
Publicly exposed Elasticsearch database leaked 24 billion stolen credentials from infostealer compilation
1 Jun 2026
Critical1 Jun 2026
Fortinet FortiGate Systems
Technology · Records not stated
FortiBleed campaign exposed valid administrative and VPN credentials for 73,932 FortiGate firewalls
1 Jun 2026
Critical1 Jun 2026
Charter Communications
Technology · 42,000,000 records
42 million customer records exposed after ShinyHunters extortion threat
1 Jun 2026
Critical1 Jun 2026
Fortinet
Technology · Records not stated
Valid administrative and VPN credentials for 73,932 FortiGate firewalls exposed in FortiBleed campaign
1 Jun 2026
Critical1 Jun 2026
Baylor Genetics
Healthcare · Records not stated
Cyberattack compromised sensitive patient genetic data and employee information
1 Jun 2026
Critical1 Jun 2026
Charter Communications
Technology · 42,000,000 records
42 million customer records exposed after breach claimed by ShinyHunters group
1 Jun 2026
Critical1 Jun 2026
Accenture
Technology · Records not stated
35GB of internal data including source code and credentials stolen by hacker
1 Jun 2026
Critical1 Jun 2026
Fortinet
Technology · Records not stated
FortiBleed campaign exposed valid administrative and VPN credentials for 73,932 FortiGate systems
1 Jun 2026
Critical1 Jun 2026
Baylor Genetics
Healthcare · Records not stated
June breach exposed patient genetic data and employee information
1 Jun 2026
Were you affected?