Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,336
Disclosures in the tracker, all years
2,049
Of those, indexed in 2026
104
Added in October
24
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 24 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

74 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Canada23 Oct 2026Crime Stoppers programs in OntarioHow they got in: a supplier or vendor that was compromised first.Global News
  2. Canada22 Oct 2026Toronto Crime StoppersHow they got in: a supplier or vendor that was compromised first.Global News
  3. Canada21 Oct 2026Canadian Crime Stoppers AssociationHow they got in: a supplier or vendor that was compromised first.CBC News
  4. Canada17 Oct 2026More RewardsThe source does not say how they got in.CTV News
  5. Canada16 Oct 2026McMurray MétisHow they got in: email made to look like it came from a trusted sender.Yahoo News Canada
High1 Jan 2026
Orange (France telecom subsidiaries)
Technology · Records not stated
Fined €42 million for cybersecurity vulnerabilities contributing to 2024 breach; three major GDPR violations
1 Jan 2026
High1 Jan 2026
Epic Systems
Healthcare · 300,000 records
300,000 people's digital health information records were accessed and sold from health records networks to law firms
1 Jan 2026
High1 Jan 2026
France telecom subsidiaries
Technology · Records not stated
Data breach in 2024 resulted in €42 million fine for cybersecurity vulnerabilities and lack of basic security controls
1 Jan 2026
High1 Jan 2026
FirstClass Travel
Sector not stated · Records not stated
Australian travel agency customer records allegedly breached, claimed on underground hacking forums
1 Jan 2026
High1 Jan 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
Data regulator fined $42-48 million for cybersecurity vulnerabilities contributing to 2024 data breach
1 Jan 2026
Medium1 Jan 2026
FirstClass Travel Agency
Sector not stated · Records not stated
Sydney-based travel agency; threat actor on underground forum alleged customer records breach
1 Jan 2026
High1 Jan 2026
Multi-year data breach of residents' private health-related information
Government · Records not stated
Multi-year data breach of residents' private health-related information
1 Jan 2026
High1 Jan 2026
French Telecom Subsidiaries
Technology · Records not stated
Data breach with inadequate security controls resulted in €42M GDPR fines from French data regulator
1 Jan 2026
High1 Jan 2026
Multi-year data breach
Healthcare · Records not stated
Multi-year data breach exposed residents' private health-related information
1 Jan 2026
High1 Jan 2026
French Telco Subsidiaries
Technology · Records not stated
Data regulator fined subsidiaries €42 million for cybersecurity vulnerabilities contributing to 2024 breach
1 Jan 2026
Critical1 Jan 2026
Armenia Government
Government · Records not stated
Alleged sale of 8M government records on hacker forum; authorities launched investigation
1 Jan 2026
High1 Jan 2026
Tribeca Film Festival
Sector not stated · 666,000 records
Unprotected database exposed 666,000 records including celebrity contact information with no password or encryption
1 Jan 2026
Critical1 Jan 2026
Qantas
Sector not stated · 5,670,000 records
Vishing attack exposed 5.67 million customer records including personal and travel data
1 Jan 2026
High1 Jan 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Yearslong data breach of residents' private health-related information reported
1 Jan 2026
Critical1 Jan 2026
Armenian Government
Government · Records not stated
Hackers offered 8 million government records for sale on hacker forum
1 Jan 2026
High1 Jan 2026
KT Corp
Technology · Records not stated
Data breach resulting in significant fine from South Korea's Personal Information Protection Commission
1 Jan 2026
High1 Jan 2026
FirstClass
Retail · Records not stated
Australian travel agency - customer records allegedly breached, threat actor posted on underground forums.
1 Jan 2026
High1 Jan 2026
Yearslong data breach of residents' private health-related information
Government · Records not stated
Yearslong data breach of residents' private health-related information
1 Jan 2026
High1 Jan 2026
Xsolis
Healthcare · Records not stated
Healthcare AI vendor breach in January 2026 exposed patient records from client healthcare organizations
1 Jan 2026
High27 Dec 2025
WIRED
Technology · 2,364,431 records
2,364,431 records exposed, Dates of birth, Display names, Email addresses, Genders and 4 more
27 Dec 2025
High26 Dec 2025
Utair
Government · 401,400 records
401,400 records exposed, Dates of birth, Email addresses, Genders, Loyalty program details and 4 more
26 Dec 2025
Critical24 Dec 2025
Медицинская лаборатория Гемотест (Gemotest)
Healthcare · 6,341,495 records
6,341,495 records exposed, Dates of birth, Email addresses, Genders, Government issued IDs and 4 more
24 Dec 2025
High18 Dec 2025
The Botting Network
Technology · 96,320 records
96,320 records exposed, Dates of birth, Email addresses, Passwords, Usernames
18 Dec 2025
Medium18 Dec 2025
AUTOSUR
Technology · 487,226 records
487,226 records exposed, Email addresses, Names, Phone numbers, Physical addresses and 3 more
18 Dec 2025
Were you affected?