Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,325
Disclosures in the tracker, all years
2,040
Of those, indexed in 2026
97
Added in October
24
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 23 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

71 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Canada22 Oct 2026Toronto Crime StoppersHow they got in: a supplier or vendor that was compromised first.Global News
  2. Canada21 Oct 2026Canadian Crime Stoppers AssociationHow they got in: a supplier or vendor that was compromised first.CBC News
  3. Canada17 Oct 2026More RewardsThe source does not say how they got in.CTV News
  4. Canada16 Oct 2026McMurray MétisHow they got in: email made to look like it came from a trusted sender.Yahoo News Canada
Critical1 May 2026
Canvas
Education · 275,000,000 records
ShinyHunters breach exposed data for 275 million users; company struck deal to delete data
1 May 2026
High1 May 2026
Organisation not named
Education · Records not stated
The disclosure as indexed does not name the organisation.
Tens of thousands of Queensland students and teachers affected in major education technology data breach
1 May 2026
Critical1 May 2026
Canvas/Instructure
Education · 275,000,000 records
ShinyHunters claimed breach exposing data of 275 million users from educational platform
1 May 2026
High1 May 2026
UC Berkeley Canvas
Education · 600,000 records
ShinyHunters stole approximately 600,000 records from Canvas learning platform used by 43,000 students
1 May 2026
High1 May 2026
Queensland Education Technology
Education · Records not stated
Major cyber breach affecting tens of thousands of Queensland students and teachers in education technology sector
1 May 2026
High1 May 2026
Australian Schools (Queensland)
Education · Records not stated
Education technology data breach affecting tens of thousands of students and teachers
1 May 2026
High1 May 2026
EY
Finance · Records not stated
Third-party vendor breach exposed tax client data; 81-day notification delay
1 May 2026
High1 May 2026
Tribeca Festival
Sector not stated · Records not stated
Data leak exposed hundreds of thousands of records including celebrity contact information
1 May 2026
High1 May 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Exposed GitHub repository with internal credentials and files
1 May 2026
High1 May 2026
Organisation not named
Education · Records not stated
The disclosure as indexed does not name the organisation.
Tens of thousands of Queensland students and teachers affected in significant global education technology breach
1 May 2026
High1 May 2026
Organisation not named
Education · Records not stated
The disclosure as indexed does not name the organisation.
Tens of thousands of students and teachers' data exposed in significant global education technology breach
1 May 2026
High1 May 2026
UC Berkeley
Education · 600,000 records
ShinyHunters stole 600K records from Canvas learning management platform
1 May 2026
High1 May 2026
Atrium Health Navicent
Healthcare · Records not stated
Patient records system breach exposing patient records and personal information
1 May 2026
Critical1 May 2026
NYC Health + Hospitals
Healthcare · 1,800,000 records
Hackers stole medical data, fingerprints, and biometric scans affecting 1.8 million people
1 May 2026
Critical1 May 2026
Foxconn
Technology · Records not stated
Ransomware group claimed to have stolen 8 terabytes of data from electronics manufacturing giant
1 May 2026
Critical1 May 2026
Canvas (Instructure)
Education · 275,000,000 records
Educational platform breached by ShinyHunters, 275 million records compromised, hackers threatened to leak data
1 May 2026
High1 May 2026
Instructure (Canvas)
Education · Records not stated
Ransomware attack, owner reached agreement with threat actors after data breach
1 May 2026
Critical1 May 2026
African National Congress (ANC)
Government · Records not stated
2 million private member records exposed and offered for sale by hacker group
1 May 2026
Medium1 May 2026
Aman
Retail · 215,563 records
215,563 records exposed, Dates of birth, Email addresses, Genders, Language preferences and 6 more
1 May 2026
High27 Apr 2026
Pitney Bowes
Technology · 8,243,989 records
8,243,989 records exposed, Email addresses, Job titles, Names, Phone numbers and 1 more
27 Apr 2026
High27 Apr 2026
ADT
Government · 30,000 records
5,488,888 records exposed, Dates of birth, Email addresses, Names, Partial government issued IDs and 2 more
27 Apr 2026
High26 Apr 2026
Udemy
Finance · 1,401,259 records
1,401,259 records exposed, Email addresses, Employers, Job titles, Names and 3 more
26 Apr 2026
High24 Apr 2026
Carnival
Technology · 7,531,359 records
7,531,359 records exposed, Dates of birth, Email addresses, Genders, Geographic locations and 3 more
24 Apr 2026
High17 Apr 2026
Amtrak
Retail · 2,147,679 records
2,147,679 records exposed, Email addresses, Names, Physical addresses, Support tickets
17 Apr 2026
Were you affected?