Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,337
Disclosures in the tracker, all years
2,050
Of those, indexed in 2026
104
Added in October
24
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 24 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

74 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. China20 Oct 2026John DeereHow they got in: automated AI tools that work through many organizations at once.SecurityWeek
  2. China20 Oct 2026Deere, SharkNinja and CumminsHow they got in: a known flaw in software the victim ran.The Hacker News
Critical1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of patient records stolen in ransomware attack affecting NHS healthcare systems
1 Jun 2026
Critical1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records confirmed stolen in ransomware attack
1 Jun 2026
Critical1 Jun 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Thousands of patient records stolen during major ransomware attack
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack stole thousands of patient records in major healthcare cyberattack
1 Jun 2026
Critical1 Jun 2026
Elasticsearch database (infostealer logs)
Technology · Records not stated
Publicly exposed database leaked 24 billion stolen credentials, one of largest credential compilations
1 Jun 2026
Critical1 Jun 2026
Unnamed Elasticsearch database
Technology · Records not stated
Publicly exposed database leaked 24 billion stolen credentials, one of largest infostealer log compilations
1 Jun 2026
Critical1 Jun 2026
Elasticsearch Database (Public Exposure)
Technology · Records not stated
Publicly exposed Elasticsearch database leaked 24 billion stolen credentials, largest infostealer compilation
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen in major ransomware attack affecting Essex healthcare
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Ransomware attack stolen thousands of NHS patient records from Essex NHS trust
1 Jun 2026
Critical1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of patient records stolen in ransomware cyberattack on NHS trust
1 Jun 2026
High1 Jun 2026
Tchap (France Government)
Government · Records not stated
Messaging app breach hit 73,467 French government accounts in June 2026
1 Jun 2026
Critical1 Jun 2026
Elasticsearch Database (Unnamed Source)
Technology · Records not stated
Publicly exposed database leaked 24 billion stolen credentials in one of the largest infostealer compilations
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen during major ransomware attack affecting Essex healthcare trust
1 Jun 2026
Medium1 Jun 2026
Nichirei
Retail · Records not stated
Ransomware attack disrupted operations at Japanese frozen-food supplier and logistics firm
1 Jun 2026
Critical1 Jun 2026
Elasticsearch Database (Public)
Technology · Records not stated
24 billion stolen credentials leaked via publicly exposed Elasticsearch database in June 2026
1 Jun 2026
Critical1 Jun 2026
Elasticsearch database
Technology · Records not stated
Publicly exposed database leaked 24 billion stolen credentials in largest infostealer compilation
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Ransomware attack stole thousands of NHS patient records from Essex NHS trust
1 Jun 2026
Critical1 Jun 2026
Tchap
Government · Records not stated
France government messaging app breached in June 2026, exposing 73,467 government accounts
1 Jun 2026
Critical1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen in ransomware attack affecting multiple clinics
1 Jun 2026
Critical1 Jun 2026
Elasticsearch database (public)
Technology · Records not stated
24 billion stolen credentials leaked in publicly exposed database; one of largest infostealer log compilations
1 Jun 2026
High1 Jun 2026
Essex NHS Trust/Synnovis
Healthcare · 900,000 records
Thousands of NHS patient records stolen in ransomware cyberattack on Mid South Essex Foundation Trust
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of patient records stolen during major ransomware attack affecting NHS trust
1 Jun 2026
Critical1 Jun 2026
Ransomware attack
Healthcare · 1,300,000 records
Ransomware attack exposed protected health data of 1.3 million people to dark web
1 Jun 2026
Critical1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen during major ransomware attack
1 Jun 2026
Were you affected?