Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,339
Disclosures in the tracker, all years
2,052
Of those, indexed in 2026
111
Added in October
18
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 25 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

74 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Canada23 Oct 2026Crime Stoppers programs in OntarioHow they got in: a supplier or vendor that was compromised first.Global News
  2. Canada22 Oct 2026Toronto Crime StoppersHow they got in: a supplier or vendor that was compromised first.Global News
  3. Canada21 Oct 2026Canadian Crime Stoppers AssociationHow they got in: a supplier or vendor that was compromised first.CBC News
  4. Canada17 Oct 2026More RewardsThe source does not say how they got in.CTV News
  5. Canada16 Oct 2026McMurray MétisHow they got in: email made to look like it came from a trusted sender.Yahoo News Canada
Critical1 Sep 2025
Organisation not named
Finance · 160,000,000 records
The disclosure as indexed does not name the organisation.
ShinyHunters exfiltrated 160 million records from Vietnam's financial system databases
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Finance · 160,000,000 records
The disclosure as indexed does not name the organisation.
ShinyHunters exfiltrated 160 million records from Vietnamese financial system databases
1 Sep 2025
High1 Sep 2025
Federal Agency
Government · Records not stated
Breach via critical GeoServer flaw CVE-2024-36401 exploitation
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Finance · 160,000,000 records
The disclosure as indexed does not name the organisation.
ShinyHunters exfiltrated over 160 million records from Vietnamese financial system databases
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Finance · 160,000,000 records
The disclosure as indexed does not name the organisation.
ShinyHunters exfiltrated 160M records from Vietnam's financial system databases
1 Sep 2025
High1 Sep 2025
Stellantis
Technology · Records not stated
Unauthorized access affecting North American customer data through provider breach
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Finance · 160,000,000 records
The disclosure as indexed does not name the organisation.
ShinyHunters exfiltrated over 160 million records from Vietnam's financial system databases
1 Sep 2025
Critical1 Sep 2025
Federal Agency (GeoServer)
Government · Records not stated
Attackers breached federal agency via critical GeoServer flaw CVE-2024-36401
1 Sep 2025
High1 Sep 2025
FinWise Bank
Finance · 689,000 records
Insider breach exposed 689,000 customer records
1 Sep 2025
High1 Sep 2025
MedicSolution
Healthcare · Records not stated
KillSec ransomware attack on healthcare software solutions provider
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Finance · 160,000,000 records
The disclosure as indexed does not name the organisation.
ShinyHunters exfiltrated over 160 million records from CIC databases
1 Sep 2025
Critical1 Sep 2025
FinWise
Finance · 689,000 records
Former employee accessed unencrypted data affecting 689,000 users
1 Sep 2025
High1 Sep 2025
Giglio
Retail · 1,026,468 records
1,026,468 records exposed, Email addresses, Names, Phone numbers, Physical addresses
1 Sep 2025
Medium27 Aug 2025
TheSqua.re
Technology · 107,041 records
107,041 records exposed, Email addresses, Geographic locations, Names, Phone numbers
27 Aug 2025
High18 Aug 2025
Allianz Life
Technology · 1,115,061 records
1,115,061 records exposed, Dates of birth, Email addresses, Genders, Names and 2 more
18 Aug 2025
High8 Aug 2025
Unigame
Technology · 843,696 records
843,696 records exposed, Email addresses, Passwords
8 Aug 2025
High1 Aug 2025
Workday
Technology · Records not stated
HR giant hackers steal personal data in recent breach
1 Aug 2025
High1 Aug 2025
Cerner
Healthcare · Records not stated
Unauthorized third party accessed health records; breach affected Huntsville Hospital and other health systems
1 Aug 2025
High1 Aug 2025
Workday
Technology · Records not stated
HR giant; hackers stole personal data in recent breach
1 Aug 2025
High1 Aug 2025
Workday
Technology · Records not stated
Hackers stole personal data in recent breach
1 Aug 2025
High1 Aug 2025
US Bank
Finance · Records not stated
Data breach following LockBit ransomware attack with threat to publish stolen data
1 Aug 2025
Critical1 Aug 2025
TransUnion
Finance · 4,400,000 records
Data breach with hackers stealing 4.4 million customers' personal information
1 Aug 2025
High1 Aug 2025
Workday
Technology · Records not stated
HR giant's breach exposed employee and customer personal data
1 Aug 2025
Critical1 Aug 2025
Organisation not named
Healthcare · 1,150,000 records
The disclosure as indexed does not name the organisation.
Ransomware attack in August 2025 affected 1.15 million individuals
1 Aug 2025
Were you affected?