Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,299
Disclosures in the tracker, all years
2,012
Of those, indexed in 2026
58
Added in October
14
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 19 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

64 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. China14 Oct 2026Hospitals and healthcare organizationsHow they got in: email made to look like it came from a trusted sender.SecurityWeek
High13 Aug 2026
100K+ officer contact records exposed
Government · Records not stated
100K+ officer contact records exposed
13 Aug 2026
Critical13 Aug 2026
Polish Patient Records Platform
Healthcare · Records not stated
19M medical records stolen in cyberattack
13 Aug 2026
Critical13 Aug 2026
US Government Civil Service
Government · Records not stated
Thousands of civil servants' passwords and White House-linked passwords exposed since early 2024
13 Aug 2026
High13 Aug 2026
River Financial Corporation
Finance · Records not stated
River Bank & Trust ransomware attack; hackers confirmed deletion of stolen data
13 Aug 2026
Critical13 Aug 2026
Multiple Organizations (Infostealer Malware)
Sector not stated · 24,000,000,000 records
24 billion records including usernames, passwords, and URLs exposed from infostealer malware campaign
13 Aug 2026
Critical13 Aug 2026
Blue Cross-Blue Shield
Healthcare · Records not stated
Massive data breach; company allegedly knew about breach and delayed reporting
13 Aug 2026
Critical13 Aug 2026
Cerner (Huntsville Hospital)
Healthcare · Records not stated
Patient data compromised in 2025 breach affecting Huntsville Hospital Health System
13 Aug 2026
Critical13 Aug 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of patient records stolen in ransomware attack affecting NHS trust
13 Aug 2026
Critical13 Aug 2026
Credential Aggregation Dump
Sector not stated · Records not stated
24B stolen credentials exposed in open database
13 Aug 2026
Critical13 Aug 2026
Poland National Patient Records
Healthcare · Records not stated
19M medical records stolen in cyberattack
13 Aug 2026
High13 Aug 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
2025 Cerner breach resulted in stolen patient data; hospital faces class action lawsuit for negligence
13 Aug 2026
Critical13 Aug 2026
24B Credential Elasticsearch Dump
Sector not stated · 24,000,000,000 records
24B credential records publicly exposed online
13 Aug 2026
Critical13 Aug 2026
MyDr Poland Medical Records
Healthcare · 19,000,000 records
19M patient records stolen from 12K clinics
13 Aug 2026
Critical13 Aug 2026
Conduent Business Services
Sector not stated · 10,500,000 records
Data breach impacted over 10.5 million individuals with customer personal information exposed in 2024 incident
13 Aug 2026
High13 Aug 2026
CEVA Logistics
Sector not stated · Records not stated
Hacker breach of shipping partner exposed names and addresses of European Steam hardware buyers
13 Aug 2026
High13 Aug 2026
WellPoint Texas
Healthcare · Records not stated
Data breach exposed personal information from WellPoint Texas health insurance operations
13 Aug 2026
Critical13 Aug 2026
Elasticsearch Credential DB
Technology · Records not stated
24B stolen credentials publicly exposed
13 Aug 2026
Critical13 Aug 2026
Ticketmaster / Snowflake
Technology · 560,000,000 records
Canadian hacker breached Snowflake affecting 165 companies including Ticketmaster, Rockstar Games. Data extortion campaign.
13 Aug 2026
High13 Aug 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen during major ransomware attack
13 Aug 2026
Critical13 Aug 2026
Gaming accounts (multiple operators)
Technology · Records not stated
11 million gaming account credentials exposed in 2024 data leaks
13 Aug 2026
High13 Aug 2026
Munson Healthcare
Healthcare · 120,000 records
120,000 patients informed of data compromise in breach
13 Aug 2026
High13 Aug 2026
Craneware Healthcare Finance
Healthcare · Records not stated
Unauthorized access to subset of data environment
13 Aug 2026
Critical13 Aug 2026
Basic-Fit Gyms
Retail · Records not stated
1M members bank details and PII breached
13 Aug 2026
Critical13 Aug 2026
Credential Aggregator Dump
Sector not stated · Records not stated
24B stolen credentials exposed in open database
13 Aug 2026
Were you affected?