Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,305
Disclosures in the tracker, all years
2,019
Of those, indexed in 2026
66
Added in October
18
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 19 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

65 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Canada16 Oct 2026McMurray MétisHow they got in: email made to look like it came from a trusted sender.Yahoo News Canada
  2. Canada2 Oct 2026Kingston PoliceHow they got in: stolen or reused passwords.Global News
  3. Canada1 Oct 2026Archives Canada / Canadian government websitesHow they got in: automated AI tools that work through many organizations at once.CTV News
Critical8 Aug 2026
Conduent Health Services
Healthcare · 62,000,000 records
62M records stolen via 3-month network intrusion
8 Aug 2026
Critical8 Aug 2026
Basic-Fit Gym Group
Sector not stated · Records not stated
1M members bank and personal data breached
8 Aug 2026
Critical8 Aug 2026
Elasticsearch Credential Database
Technology · Records not stated
24B stolen credential records publicly exposed
8 Aug 2026
Critical8 Aug 2026
135K police and government contact records leaked
Government · Records not stated
135K police and government contact records leaked
8 Aug 2026
Critical8 Aug 2026
Carnival Corporation
Retail · Records not stated
6M loyalty accounts stolen by ShinyHunters
8 Aug 2026
Critical8 Aug 2026
Navia Benefits Solutions
Finance · 2,700,000 records
SSNs and benefits data stolen from 2.7M people
8 Aug 2026
Critical8 Aug 2026
Police and justice staff PII exposed
Government · Records not stated
Police and justice staff PII exposed
8 Aug 2026
Medium8 Aug 2026
Canada Computers
Retail · 1,284 records
Payment card data stolen from 1,284 accounts
8 Aug 2026
Critical8 Aug 2026
135K law enforcement contacts leaked on dark web
Government · Records not stated
135K law enforcement contacts leaked on dark web
8 Aug 2026
Critical8 Aug 2026
Police officer names and emails
Government · Records not stated
Police officer names and emails exposed
8 Aug 2026
High8 Aug 2026
UK Dept for Education
Education · Records not stated
600K parent and staff contacts exfiltrated
8 Aug 2026
Critical8 Aug 2026
Snowflake via Connor Moucka
Technology · 165,000,000 records
Billions of records across 165 organizations stolen
8 Aug 2026
High8 Aug 2026
Pathstone Private Office
Finance · Records not stated
641K sensitive financial records stolen
8 Aug 2026
High8 Aug 2026
135K law enforcement contacts leaked dark web
Government · Records not stated
135K law enforcement contacts leaked dark web
8 Aug 2026
Critical8 Aug 2026
Amgen Pharmaceuticals
Healthcare · Records not stated
Patient and corporate data stolen from cloud systems
8 Aug 2026
Critical8 Aug 2026
100K+ officer and justice staff records leaked
Government · Records not stated
100K+ officer and justice staff records leaked
8 Aug 2026
High7 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
A recent wave of cyber attacks targeting financial services, private equity, and professional services has been attributed to a data extortion group known as UNC6671. "UNC6671 continues to rely on voice phishing…
7 Aug 2026
Critical7 Aug 2026
City of Coweta
Government · Records not stated
KTUL in Oklahoma reports: The City of Coweta says they are currently responding to a ransomware attack. According to officials, on Werdnesday, August 5, the City experienced at system-wide attack and immediately…
7 Aug 2026
High7 Aug 2026
Levi Strauss & Co.
Retail · Records not stated
Hackers used social engineering to steal corporate data from three employees
7 Aug 2026
High7 Aug 2026
Swiss Federal Government (BIT/FOITT)
Government · Records not stated
Hackers exploited Microsoft SharePoint vulnerabilities to breach servers and compromise 200 accounts
7 Aug 2026
High7 Aug 2026
Coinbase
Finance · Records not stated
Breach involving outsourcer fired HR employees investigating data theft; suspect retained data for 10,000+ customers
7 Aug 2026
Critical7 Aug 2026
Gaming Accounts (Multi-org)
Technology · Records not stated
11+ million gaming account credentials exposed through credential theft and infostealer malware
7 Aug 2026
High7 Aug 2026
Officer PII and justice partner emails
Government · Records not stated
Officer PII and justice partner emails exposed
7 Aug 2026
Medium7 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft attacks, known to impact Framework and Tally.
7 Aug 2026
Were you affected?