Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,307
Disclosures in the tracker, all years
2,021
Of those, indexed in 2026
71
Added in October
20
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 20 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

69 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Canada16 Oct 2026McMurray MétisHow they got in: email made to look like it came from a trusted sender.Yahoo News Canada
  2. Canada14 Oct 2026Nova Scotia minor hockey communityHow they got in: email made to look like it came from a trusted sender.PNI Atlantic News
  3. Canada2 Oct 2026Kingston PoliceHow they got in: stolen or reused passwords.Global News
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Police, government and customer contact data leaked on dark web including names and emails
1 Aug 2026
High1 Aug 2026
Bol.com
Retail · Records not stated
Third-party warehousing logistics partner hacked, disrupting retailer operations
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records leaked on dark web by ExfilSquad; police and government contact details exposed
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised, SharePoint vulnerabilities suspected in on-premises Microsoft servers
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records stolen, police and government data leaked on dark web
1 Aug 2026
High1 Aug 2026
SharePoint vulnerabilities compromised 200 government accounts
Government · Records not stated
SharePoint vulnerabilities compromised 200 government accounts
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records and police/government contact details leaked on dark web by ExfilSquad
1 Aug 2026
High1 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack; hackers deleted stolen data after ransom gang confirmation
1 Aug 2026
Critical1 Aug 2026
Unlimited Technology Systems
Healthcare · 3,800,000 records
Hackers stole personal, medical, and health insurance information of 3.8 million people
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised; Microsoft SharePoint vulnerabilities suspected on on-premises servers
1 Aug 2026
Medium1 Aug 2026
Five Hong Kong Firms
Sector not stated · Records not stated
Orova ransomware breached five Hong Kong organizations in debut campaign
1 Aug 2026
High1 Aug 2026
bol.com
Retail · Records not stated
Third-party warehousing logistics partner hacked, affecting online retailer operations
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised via SharePoint vulnerabilities in Microsoft servers
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records of police and government officials leaked on dark web by ExfilSquad
1 Aug 2026
High1 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack resulted in data theft; hackers confirmed deletion of stolen data.
1 Aug 2026
High1 Aug 2026
Craneware
Healthcare · Records not stated
Healthcare software vendor suffered breach exposing customer data in supply-chain attack affecting healthcare industry.
1 Aug 2026
High1 Aug 2026
200 accounts compromised; on-premises Microsoft servers affected
Government · Records not stated
200 accounts compromised; on-premises Microsoft servers affected
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records including police and government contact details leaked on dark web by ExfilSquad
1 Aug 2026
High1 Aug 2026
Multiple Hong Kong Firms
Sector not stated · Records not stated
Five Hong Kong organizations breached by Orova ransomware in debut campaign spanning 24 victims
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Hackers exploited SharePoint vulnerabilities to breach Microsoft servers, compromising 200 accounts
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised after anomalies detected in on-premises Microsoft servers
1 Aug 2026
High1 Aug 2026
Framework
Technology · Records not stated
Hackers accessed names, email addresses, phone numbers, and physical addresses of all customers
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135K contact records and police/government contact details leaked on dark web by ExfilSquad
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised; anomalies detected in on-premises Microsoft servers, SharePoint vulnerabilities suspected
1 Aug 2026
Were you affected?