Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,328
Disclosures in the tracker, all years
2,042
Of those, indexed in 2026
95
Added in October
24
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 22 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

72 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. China20 Oct 2026Deere, SharkNinja and CumminsHow they got in: a known flaw in software the victim ran.The Hacker News
  2. China20 Oct 2026John DeereHow they got in: automated AI tools that work through many organizations at once.SecurityWeek
  3. China14 Oct 2026Hospitals and healthcare organizationsHow they got in: email made to look like it came from a trusted sender.SecurityWeek
Critical1 Jul 2026
Amgen
Healthcare · Records not stated
Patient health data and intellectual property stolen after hackers accessed cloud environment
1 Jul 2026
Critical1 Jul 2026
Origin Energy
Sector not stated · 2,000,000 records
2 million customer records stolen in hacking incident
1 Jul 2026
High1 Jul 2026
LastPass
Technology · Records not stated
Data breach at third-party vendor exposed customer data
1 Jul 2026
Critical1 Jul 2026
Network intrusion
Government · Records not stated
Network intrusion confirmed on Homeland Security Information Network
1 Jul 2026
High1 Jul 2026
Hugging Face
Technology · Records not stated
Breach affected internal datasets and credentials, users urged to rotate tokens
1 Jul 2026
Critical1 Jul 2026
Accenture
Technology · Records not stated
Data breach involving 35GB of internal data including source code and credentials
1 Jul 2026
High1 Jul 2026
Coca-Cola (Fairlife)
Retail · Records not stated
Ransomware attack shut down dairy operations, disclosed to SEC
1 Jul 2026
High1 Jul 2026
Fairlife
Retail · Records not stated
Ransomware attack on Coca-Cola's dairy unit affected production-related systems
1 Jul 2026
High1 Jul 2026
River Bank & Trust
Finance · Records not stated
Ransomware attack resulted in data theft; hackers confirmed deletion of stolen data
1 Jul 2026
High1 Jul 2026
Chick-fil-A
Retail · Records not stated
Hackers accessed customer loyalty accounts using stolen usernames and passwords
1 Jul 2026
High1 Jul 2026
Clover Health
Healthcare · Records not stated
Health insurer disclosed data breach; data type and victim count not yet determined
1 Jul 2026
High1 Jul 2026
Craneware
Healthcare · Records not stated
Hospital software vendor breach exposed healthcare customer data through supply-chain attack
1 Jul 2026
High1 Jul 2026
River Financial Corporation
Finance · Records not stated
Ransomware attack; hackers deleted stolen data after ransom demand; confirmed data deletion
1 Jul 2026
Critical1 Jul 2026
Instructure (Canvas platform)
Education · Records not stated
Supply chain breach generating majority of 2026 breach notices
1 Jul 2026
High1 Jul 2026
Ransomware attack disrupted systems operations
Sector not stated · Records not stated
Ransomware attack disrupted systems operations
1 Jul 2026
Critical1 Jul 2026
Comcast Xfinity
Technology · 35,000,000 records
Cyberattack exposes personal information of Xfinity customers; $117.5M settlement reached
1 Jul 2026
High1 Jul 2026
LVM (Latvian State Forestry)
Sector not stated · Records not stated
Ransomware attack, systems still being restored weeks after incident
1 Jul 2026
High1 Jul 2026
DHS (Homeland Security)
Government · Records not stated
Network intrusion on Homeland Security Information Network supporting World Cup operations confirmed
1 Jul 2026
High1 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Network intrusion on Homeland Security Information Network supporting World Cup infrastructure
1 Jul 2026
High1 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack attributed to foreign financially motivated threat group
1 Jul 2026
High1 Jul 2026
LVM (Latvian Forestry)
Sector not stated · Records not stated
Ransomware attack by foreign financially motivated group disrupted forestry operations
1 Jul 2026
High1 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack attributed to foreign financially motivated group; systems restoration ongoing
1 Jul 2026
High1 Jul 2026
Network intrusion on Homeland Security Information Network
Government · Records not stated
Network intrusion on Homeland Security Information Network confirmed after being ruled false positive twice
1 Jul 2026
High1 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Network intrusion on Homeland Security Information Network confirmed after twice ruled false positive
1 Jul 2026
Were you affected?