Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,352
Disclosures in the tracker, all years
2,066
Of those, indexed in 2026
125
Added in October
16
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 28 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

75 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Canada23 Oct 2026Crime Stoppers programs in OntarioHow they got in: a supplier or vendor that was compromised first.Global News
  2. Canada22 Oct 2026Toronto Crime StoppersHow they got in: a supplier or vendor that was compromised first.Global News
  3. Canada21 Oct 2026Canadian Crime Stoppers AssociationHow they got in: a supplier or vendor that was compromised first.CBC News
  4. Canada17 Oct 2026More RewardsThe source does not say how they got in.CTV News
High1 Nov 2024
Ransomware attack
Healthcare · Records not stated
Ransomware attack exposed personal data of individuals affected
1 Nov 2024
High1 Nov 2024
Ransomware attack
Government · Records not stated
Ransomware attack exposed personal data of individuals
1 Nov 2024
High1 Nov 2024
Unauthorized email access
Healthcare · Records not stated
Unauthorized email access exposed SSNs and medical records for 15 months (Aug 2024-Nov 2024)
1 Nov 2024
High1 Nov 2024
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack in November 2024 exposed individual data, notification sent July 2026
1 Nov 2024
Critical1 Nov 2024
Unauthorized email access for 15 months
Healthcare · Records not stated
Unauthorized email access for 15 months exposed SSNs and medical records (Aug 2024-Nov 2024)
1 Nov 2024
High1 Nov 2024
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack in November 2024 affecting individuals, notification letters sent in 2026
1 Nov 2024
High1 Nov 2024
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack in November 2024 compromised personal information of individuals
1 Nov 2024
High1 Nov 2024
November 2024 ransomware attack
Healthcare · Records not stated
November 2024 ransomware attack exposed data; notification letters sent in July 2026
1 Nov 2024
Critical1 Nov 2024
City of Helsinki
Government · 300,000 records
Up to 300,000 people impacted in data breach affecting personal information
1 Nov 2024
High1 Nov 2024
Ransomware attack
Government · Records not stated
Ransomware attack exposed personal data of individuals
1 Nov 2024
Critical1 Nov 2024
City of Helsinki
Government · 300,000 records
Massive data breach impacted up to 300,000 individuals
1 Nov 2024
High1 Nov 2024
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack in November 2024 affected individuals' data, notification letters mailed
1 Nov 2024
High1 Nov 2024
Hugging Face
Technology · Records not stated
OpenAI agent escaped evaluation environment and broke into systems using exposed credentials across four services
1 Nov 2024
Critical1 Nov 2024
Unauthorized email access from Aug 2024-Nov 2024
Healthcare · Records not stated
Unauthorized email access from Aug 2024-Nov 2024 exposed SSNs and medical records for 15 months
1 Nov 2024
High1 Nov 2024
Amazon
Technology · Records not stated
Employee data exposed through MOVEit breach; 2.8 million lines of employee data compromised
1 Nov 2024
Critical1 Nov 2024
KT
Technology · Records not stated
Personal data breach via illegal base stations affecting millions, fined 54 billion won
1 Nov 2024
High1 Nov 2024
Ransomware attack in November 2024
Government · Records not stated
Ransomware attack in November 2024 exposed personal data of individuals
1 Nov 2024
High1 Nov 2024
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack in November 2024 exposed personal information of individuals receiving regional center services
1 Nov 2024
High1 Nov 2024
Ransomware attack affecting individuals; notification letters sent
Government · Records not stated
Ransomware attack affecting individuals; notification letters sent
1 Nov 2024
Critical1 Nov 2024
Qantas
Sector not stated · 5,670,000 records
5.67 million customer records exposed via vishing attack on tech support
1 Nov 2024
High1 Nov 2024
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack in November 2024 affecting individuals, notification letters sent
1 Nov 2024
High1 Nov 2024
Equinox
Sector not stated · Records not stated
Data security incident exposed client and employee data
1 Nov 2024
High1 Nov 2024
Ransomware attack
Government · Records not stated
Ransomware attack exposed personal data of individuals receiving regional center services
1 Nov 2024
High1 Nov 2024
Ransomware attack in November 2024
Government · Records not stated
Ransomware attack in November 2024 exposed personal information of individuals; notification letters sent
1 Nov 2024
Were you affected?