Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,292
Disclosures in the tracker, all years
2,005
Of those, indexed in 2026
50
Added in October
9
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 18 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

64 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Canada2 Oct 2026Kingston PoliceHow they got in: stolen or reused passwords.Global News
  2. Canada1 Oct 2026Archives Canada / Canadian government websitesHow they got in: automated AI tools that work through many organizations at once.CTV News
  3. Canada1 Oct 2026Library and Archives CanadaHow they got in: automated AI tools that work through many organizations at once.CTV News
Critical1 Sep 2026
CenterPoint Energy
Sector not stated · 7,490,000 records
Data breach exposing 7.49 million customer records
1 Sep 2026
High1 Sep 2026
Revolut
Finance · Records not stated
Customer data breach through fake government requests; hundreds of customers affected
1 Sep 2026
High1 Sep 2026
Luminis
Healthcare · Records not stated
Healthcare cybersecurity incident affecting Anne Arundel County hospital
1 Sep 2026
High1 Sep 2026
Canva
Technology · Records not stated
Personal and corporate data exposed affecting 424 organizations in Turkey
1 Sep 2026
Critical1 Sep 2026
Driver license information potentially accessed in data breach
Government · Records not stated
Driver license information potentially accessed in data breach
1 Sep 2026
High1 Sep 2026
Springfield Public Schools
Education · Records not stated
Student and staff data breached by cybercriminals in cyberattack
1 Sep 2026
Critical1 Sep 2026
Organisation not named
Healthcare · 727,000 records
The disclosure as indexed does not name the organisation.
French hospital breach exposed 727,000 patient and contact records
1 Sep 2026
Critical1 Sep 2026
Manchester Airport Group
Sector not stated · 8,700,000 records
Breach exposed 8.7 million customer records; 640GB data stolen and published by FulcrumSec on September 3, 2026
1 Sep 2026
Critical1 Sep 2026
Thomson Reuters
Legal · Records not stated
C-Track court management platform breach exposed sealed court records and personal data including SSNs affecting US and Canadian courts
1 Sep 2026
High1 Sep 2026
Department
Government · Records not stated
Department investigating data breach involving driver information
1 Sep 2026
High1 Sep 2026
Revolut
Finance · Records not stated
Data breach with $3M ransom demand; attacker threatening to sell stolen data
1 Sep 2026
Critical1 Sep 2026
CenterPoint Energy
Sector not stated · 7,490,000 records
7.49 million customer records stolen in data breach
1 Sep 2026
Critical1 Sep 2026
Springfield Public Schools
Education · Records not stated
Student and staff data breached; potentially includes Social Security numbers
1 Sep 2026
High1 Sep 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Spain's data protection authority experienced a data breach via autonomous AI agent
1 Sep 2026
High1 Sep 2026
xHealth
Healthcare · 118,000 records
Practice management and EHR software provider breach exposed 118,000 individuals' data
1 Sep 2026
Critical1 Sep 2026
AdaptHealth
Healthcare · 4,099,999 records
4.1 million people impacted; personal, health, and insurance information stolen
1 Sep 2026
High1 Sep 2026
MIP Holdings
Finance · Records not stated
Cyber attack exposed personal information of South African insurance customers
1 Sep 2026
Critical1 Sep 2026
IDScan
Technology · Records not stated
153 million driver's license scans stolen from cloud platform
1 Sep 2026
Critical1 Sep 2026
McKesson
Healthcare · 284,000,000 records
Data breach with 284 million records stolen by ShinyHunters extortion group
1 Sep 2026
High1 Sep 2026
Novocure
Healthcare · Records not stated
Cyberattack exposed US patient records in oncology firm systems
1 Sep 2026
High1 Sep 2026
Canva
Technology · Records not stated
Data breach affected 424 organizations in Turkey, exposing personal information
1 Sep 2026
High1 Sep 2026
Data breach
Government · Records not stated
Data breach investigating potential exposure of driver information including licenses
1 Sep 2026
High1 Sep 2026
Revolut
Finance · Records not stated
Data breach with attackers demanding $3 million ransom; threatening to sell stolen data
1 Sep 2026
Critical1 Sep 2026
CenterPoint Energy
Sector not stated · 7,490,000 records
Data breach exposed 7.49 million customer records
1 Sep 2026
Were you affected?