Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,339
Disclosures in the tracker, all years
2,052
Of those, indexed in 2026
111
Added in October
18
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 25 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

74 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Canada23 Oct 2026Crime Stoppers programs in OntarioHow they got in: a supplier or vendor that was compromised first.Global News
  2. Canada22 Oct 2026Toronto Crime StoppersHow they got in: a supplier or vendor that was compromised first.Global News
  3. Canada21 Oct 2026Canadian Crime Stoppers AssociationHow they got in: a supplier or vendor that was compromised first.CBC News
  4. Canada17 Oct 2026More RewardsThe source does not say how they got in.CTV News
  5. Canada16 Oct 2026McMurray MétisHow they got in: email made to look like it came from a trusted sender.Yahoo News Canada
Critical1 Oct 2025
Canadian Tire
Retail · 38,000,000 records
38 million customer accounts breached; personal data, contact details, and encrypted passwords exposed in October 2025
1 Oct 2025
Critical1 Oct 2025
Salesforce
Technology · 1,000,000,000 records
Hacking group claims theft of 1 billion records from customer databases
1 Oct 2025
High1 Oct 2025
Qantas Airways
Sector not stated · Records not stated
Personal data of customers leaked online after being stolen in July 2025 cyberattack
1 Oct 2025
High1 Oct 2025
Capita
Sector not stated · Records not stated
Data breach resulting in £14 million fine from UK ICO for GDPR infringements
1 Oct 2025
High1 Oct 2025
Vietnam Airlines
Sector not stated · Records not stated
Data breach linked to global cyberattack affecting major companies including Qantas
1 Oct 2025
Critical1 Oct 2025
Qantas
Sector not stated · 5,000,000 records
5 million customer records leaked by Scattered Lapsus$ Hunters after ransom deadline passed
1 Oct 2025
Critical1 Oct 2025
Blue Cross Blue Shield
Healthcare · Records not stated
Massive data breach of healthcare provider; company allegedly delayed reporting
1 Oct 2025
Critical1 Oct 2025
Canadian Tire
Retail · 38,000,000 records
E-commerce database breach exposed personal data and encrypted passwords of 38 million accounts
1 Oct 2025
Critical1 Oct 2025
Capita
Sector not stated · 6,600,000 records
6.6 million records exposed due to 58-hour delay in breach response, resulting in £14M fine
1 Oct 2025
High1 Oct 2025
Salesforce
Technology · Records not stated
Attackers used social engineering and OAuth exploits to breach customer data
1 Oct 2025
High1 Oct 2025
Capita
Sector not stated · Records not stated
Customer data breach resulting in ICO fine of £14 million for GDPR infringements
1 Oct 2025
Critical1 Oct 2025
Canadian Tire
Retail · 38,000,000 records
E-commerce database breach exposed names, addresses, emails, birth years of 38 million customer accounts
1 Oct 2025
Critical1 Oct 2025
PNC Financial Services Group
Finance · 740,000 records
Data breach exposed 740,000 records of personally identifiable information; class action filed.
1 Oct 2025
Critical1 Oct 2025
Unlimited Technology Systems
Healthcare · Records not stated
Revenue cycle management provider breach exposed 3.8 million healthcare patients' information including personal and medical data.
1 Oct 2025
High1 Oct 2025
Motility
Technology · Records not stated
Ransomware attack where hackers encrypted servers supporting car dealership software operations
1 Oct 2025
High1 Oct 2025
Salesforce
Technology · Records not stated
Attackers used social engineering and OAuth exploits to breach systems and access customer data
1 Oct 2025
High1 Oct 2025
Mango
Retail · Records not stated
Spanish fast-fashion retailer; limited customer information exposed via external marketing provider breach
1 Oct 2025
Critical1 Oct 2025
Canadian Tire
Retail · 38,000,000 records
38 million customer accounts exposed including names, addresses, emails, birth years, encrypted passwords
1 Oct 2025
Critical1 Oct 2025
PNC Financial Services Group
Finance · 740,000 records
Data breach exposing 740,000 customer records with inadequate security measures
1 Oct 2025
Critical1 Oct 2025
Unlimited Technology Systems
Healthcare · Records not stated
Revenue cycle management provider exposed 3.8 million healthcare patients' information
1 Oct 2025
Critical1 Oct 2025
Multiple (Email Password Leak)
Technology · 183,000,000 records
183 million email passwords exposed including tens of millions Gmail accounts
1 Oct 2025
High1 Oct 2025
U.S. Government
Government · 53,070 records
Password exposure revealed 53,070 passwords associated with U.S. government email domains exposed since 2024
1 Oct 2025
Critical1 Oct 2025
Multiple (Email Passwords)
Technology · 183,000,000 records
183 million email passwords exposed, including tens of millions Gmail accounts
1 Oct 2025
Critical1 Oct 2025
Unknown (Email providers)
Technology · 183,000,000 records
183 million email passwords exposed, including tens of millions Gmail accounts
1 Oct 2025
Were you affected?