Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,339
Disclosures in the tracker, all years
2,052
Of those, indexed in 2026
111
Added in October
18
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 25 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

74 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Canada23 Oct 2026Crime Stoppers programs in OntarioHow they got in: a supplier or vendor that was compromised first.Global News
  2. Canada22 Oct 2026Toronto Crime StoppersHow they got in: a supplier or vendor that was compromised first.Global News
  3. Canada21 Oct 2026Canadian Crime Stoppers AssociationHow they got in: a supplier or vendor that was compromised first.CBC News
  4. Canada17 Oct 2026More RewardsThe source does not say how they got in.CTV News
  5. Canada16 Oct 2026McMurray MétisHow they got in: email made to look like it came from a trusted sender.Yahoo News Canada
High1 Aug 2025
Cerner
Healthcare · Records not stated
EHR vendor breach exposed patient data at Huntsville Hospital Health System and other healthcare systems.
1 Aug 2025
High1 Aug 2025
Cerner/Huntsville Hospital
Healthcare · Records not stated
EHR vendor breach notified healthcare systems of unauthorized third-party access
1 Aug 2025
High1 Aug 2025
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised via Microsoft SharePoint vulnerabilities on on-premises servers
1 Aug 2025
High1 Aug 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Data security incident, $40M settlement reached in class action
1 Aug 2025
High1 Aug 2025
Data security incident resulted in $40M settlement
Retail · Records not stated
Data security incident resulted in $40M settlement
1 Aug 2025
High1 Aug 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Data security incident affecting personal information, $40M settlement reached
1 Aug 2025
High1 Aug 2025
Data breach
Retail · Records not stated
Data breach exposed personal information; companies reached $40M settlement
1 Aug 2025
High1 Aug 2025
Cencora
Retail · Records not stated
Data security incident resolved with $40M settlement in class action
1 Aug 2025
High1 Aug 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Data security incident with $40M settlement reached in class action lawsuit
1 Aug 2025
Critical1 Aug 2025
PayPal
Finance · Records not stated
Hackers claimed to have stolen 15.8 million PayPal credentials including emails and passwords
1 Aug 2025
Medium31 Jul 2025
Pi-hole
Technology · 29,926 records
29,926 records exposed, Email addresses, Names
31 Jul 2025
Medium23 Jul 2025
Creams Cafe
Technology · 159,652 records
159,652 records exposed, Email addresses, Names, Phone numbers, Physical addresses
23 Jul 2025
Medium15 Jul 2025
MaReads
Technology · 74,453 records
74,453 records exposed, Dates of birth, Email addresses, Phone numbers, Usernames
15 Jul 2025
Medium13 Jul 2025
Omnicuris
Healthcare · 215,298 records
215,298 records exposed, Email addresses, Geographic locations, Names, Phone numbers
13 Jul 2025
High3 Jul 2025
Catwatchful
Technology · 61,641 records
61,641 records exposed, Email addresses, Passwords
3 Jul 2025
Critical1 Jul 2025
Qantas Airways
Sector not stated · 6,000,000 records
Hackers stole 5-6 million customer records in July 2025; data leaked after ransom deadline
1 Jul 2025
Critical1 Jul 2025
Qantas Airways
Retail · 5,000,000 records
Personal data of 5 million customers stolen in July 2025, leaked online after ransom deadline passed
1 Jul 2025
Critical1 Jul 2025
Qantas Airways
Sector not stated · 6,000,000 records
Criminals stole nearly 6 million customer records in July attack
1 Jul 2025
Critical1 Jul 2025
Qantas Airways
Retail · 6,000,000 records
Criminals stole approximately 6 million customer records in July 2025; data later leaked by Scattered Lapsus$ Hunters
1 Jul 2025
Critical1 Jul 2025
Qantas Airways
Sector not stated · 6,000,000 records
Nearly 6 million customer records stolen; names, emails, phone numbers exposed in July attack
1 Jul 2025
High1 Jul 2025
American Lending Center (ALC)
Finance · 123,158 records
Ransomware attack July 2025 exposed sensitive data of 123,158 individuals at financial services provider
1 Jul 2025
Critical1 Jul 2025
Qantas Airways
Sector not stated · 6,000,000 records
Nearly 6 million customer records stolen in July 2025, data leaked after ransom deadline
1 Jul 2025
High1 Jul 2025
American Lending Center
Finance · 123,158 records
123,158 individuals' sensitive financial data exposed in ransomware attack
1 Jul 2025
Critical1 Jul 2025
Qantas Airways
Sector not stated · 6,000,000 records
Hackers stole nearly 6 million customer records in July; data leaked after ransom deadline
1 Jul 2025
Were you affected?