Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,337
Disclosures in the tracker, all years
2,050
Of those, indexed in 2026
104
Added in October
24
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 24 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

74 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Canada23 Oct 2026Crime Stoppers programs in OntarioHow they got in: a supplier or vendor that was compromised first.Global News
  2. Canada22 Oct 2026Toronto Crime StoppersHow they got in: a supplier or vendor that was compromised first.Global News
  3. Canada21 Oct 2026Canadian Crime Stoppers AssociationHow they got in: a supplier or vendor that was compromised first.CBC News
  4. Canada17 Oct 2026More RewardsThe source does not say how they got in.CTV News
  5. Canada16 Oct 2026McMurray MétisHow they got in: email made to look like it came from a trusted sender.Yahoo News Canada
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack shut down computer network; surgeries canceled and clinics closed
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack disabled computer network; surgeries canceled and clinics closed
1 Feb 2026
Critical1 Feb 2026
Mexican Government (9 agencies)
Government · Records not stated
Single hacker exploited Claude Code and OpenAI ChatGPT to breach 9 federal agencies Dec 2025-Feb 2026
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack on hospital network caused surgeries to be canceled and clinics closed
1 Feb 2026
High1 Feb 2026
Huntsville Hospital Health System
Healthcare · Records not stated
Patient data compromised through third-party breach affecting multiple facilities
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack disabled computer network, cancelled surgeries and closed clinics
1 Feb 2026
Critical1 Feb 2026
Exposed cloud database
Sector not stated · 3,000,000,000 records
Misconfigured database leaked 3 billion records including SSNs and plaintext passwords
1 Feb 2026
Critical1 Feb 2026
Unknown misconfigured database
Sector not stated · 3,000,000,000 records
3 billion records exposed including SSNs and plaintext passwords
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack disrupted network; surgeries canceled and clinics closed
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack brought down computer network, canceled surgeries and closed clinics
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack shut down computer network, cancelled surgeries and clinics
1 Feb 2026
High1 Feb 2026
KT Corporation
Technology · Records not stated
Customer data breach; South Korea fined telco $39 million for personal information exposure
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack on hospital network forced closure of clinics and cancellation of surgeries
1 Feb 2026
Medium1 Feb 2026
Malaysia Airlines
Sector not stated · Records not stated
Claimed by Qilin ransomware group on leak site, though no proof or data samples provided
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack brought down computer network; surgeries canceled, clinics closed
1 Feb 2026
High1 Feb 2026
FirstClass Travel
Sector not stated · Records not stated
Australian travel agency customer records allegedly compromised and posted on underground hacking forums
1 Feb 2026
Critical1 Feb 2026
Exposed database
Sector not stated · 3,000,000,000 records
Exposed database leaked 3 billion records including Social Security numbers and plaintext passwords
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack shut down computer network; surgeries canceled, clinics closed
1 Feb 2026
Critical1 Feb 2026
Unknown Cloud Database
Sector not stated · 3,000,000,000 records
Misconfigured database leaked 3 billion records including SSNs and passwords
1 Feb 2026
High1 Feb 2026
Tribeca Film Festival
Sector not stated · 666,000 records
Unprotected database exposed 666,000 records of Hollywood actors and directors with contact data, no encryption
1 Feb 2026
Critical1 Feb 2026
Mexican Government (Nine Agencies)
Government · Records not stated
Hacker exploited AI tools (Claude Code and OpenAI) to compromise nine federal agencies, affecting millions of records
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack shut down computer network, surgeries canceled, clinics closed
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack brought down computer network; surgeries canceled and clinics closed
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack shut down computer network, canceled surgeries and closed clinics
1 Feb 2026
Were you affected?