Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,352
Disclosures in the tracker, all years
2,066
Of those, indexed in 2026
125
Added in October
16
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 28 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

75 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Canada23 Oct 2026Crime Stoppers programs in OntarioHow they got in: a supplier or vendor that was compromised first.Global News
  2. Canada22 Oct 2026Toronto Crime StoppersHow they got in: a supplier or vendor that was compromised first.Global News
  3. Canada21 Oct 2026Canadian Crime Stoppers AssociationHow they got in: a supplier or vendor that was compromised first.CBC News
  4. Canada17 Oct 2026More RewardsThe source does not say how they got in.CTV News
Critical1 Dec 2024
Gaming Accounts (Multiple)
Technology · Records not stated
Over 11 million gaming account credentials exposed in 2024 data leaks
1 Dec 2024
Critical1 Dec 2024
Ernst & Young
Finance · Records not stated
Names, addresses, SSNs, and financial information stolen from third-party platform
1 Dec 2024
High1 Dec 2024
River Financial Corporation
Finance · Records not stated
Ransomware attack; hackers stole data and later confirmed deletion
1 Dec 2024
Critical1 Dec 2024
Canada Life
Finance · 5,500,000 records
Threat actor claims 5.5 million records for sale including customer, employee, and corporate data
1 Dec 2024
High1 Dec 2024
Ecopetrol
Sector not stated · 3,300 records
Cyberattack stole data tied to approximately 3,300 user accounts at Colombian state energy company
1 Dec 2024
Critical1 Dec 2024
Accenture
Technology · Records not stated
Threat actor stole vast trove of sensitive data from consulting giant in cyberattack
1 Dec 2024
Critical1 Dec 2024
Trizetto Provider Solutions
Healthcare · 3,400,000 records
Unauthorized access to IT environment exposed PHI of 3.4 million individuals
1 Dec 2024
High1 Dec 2024
FirstClass (Australian travel agency)
Retail · Records not stated
Customer records allegedly breached; threat actor claims on underground forums
1 Dec 2024
Critical1 Dec 2024
Qantas
Sector not stated · 5,670,000 records
5.67 million customer records exposed via vishing attack including personal and travel information
1 Dec 2024
Critical1 Dec 2024
UnitedHealthcare
Healthcare · Records not stated
2024 cyberattack exposing sensitive health and insurance data from millions of patients
1 Dec 2024
Critical1 Dec 2024
Tribeca Film Festival
Sector not stated · 666,000 records
Unprotected database exposed 666,000 records including celebrity contact data without password or encryption
1 Dec 2024
Critical1 Dec 2024
McLaren Health Care
Healthcare · 3,200,000 records
Two ransomware attacks in 2023 and 2024 affecting 3.2 million patients, settled class-action for $14M
1 Dec 2024
Critical1 Dec 2024
Meta
Technology · Records not stated
2018 data breach; EU privacy regulator fined Meta 251 million euros for violations
1 Dec 2024
High1 Dec 2024
South Florida Injury Centers
Healthcare · 1,525 records
Data breach exposed 1,525 records including SSNs and medical records (PHI/PII)
1 Dec 2024
Critical1 Dec 2024
Revolut
Finance · 75,000,000 records
75 million customer records including credit card data allegedly exposed for sale
1 Dec 2024
High1 Dec 2024
PowerSchool
Education · Records not stated
Cyberattack in Dec 2024 exposed student and staff data from thousands of schools
1 Dec 2024
High29 Nov 2024
Krispy Kreme
Technology · Records not stated
Play ransomware attack disrupted online ordering systems
29 Nov 2024
High28 Nov 2024
Alder Hey Children's Hospital
Healthcare · Records not stated
INC Ransom gang stole patient records from Liverpool children's hospital
28 Nov 2024
High25 Nov 2024
Wirral University Teaching Hospital
Healthcare · Records not stated
Cyberattack forced hospital to declare major incident, systems offline for days
25 Nov 2024
Medium22 Nov 2024
The Real World
Education · 324,382 records
324,382 records exposed, Chat logs, Email addresses, Usernames
22 Nov 2024
High21 Nov 2024
Morrisons (Blue Yonder)
Sector not stated · Records not stated
UK grocery operations disrupted in supply chain attack
21 Nov 2024
High21 Nov 2024
Starbucks (Blue Yonder)
Sector not stated · Records not stated
Employee scheduling disrupted in supply chain ransomware
21 Nov 2024
Critical21 Nov 2024
Blue Yonder
Technology · Records not stated
Supply chain SaaS provider hit by ransomware affecting Starbucks, grocery chains
21 Nov 2024
High20 Nov 2024
FlipaClip
Technology · 892,854 records
892,854 records exposed, Dates of birth, Email addresses, Geographic locations, Names
20 Nov 2024
Were you affected?