Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,314
Disclosures in the tracker, all years
2,028
Of those, indexed in 2026
76
Added in October
21
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 21 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

72 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. China20 Oct 2026Deere, SharkNinja and CumminsHow they got in: a known flaw in software the victim ran.The Hacker News
  2. China20 Oct 2026John DeereHow they got in: automated AI tools that work through many organizations at once.SecurityWeek
  3. China14 Oct 2026Hospitals and healthcare organizationsHow they got in: email made to look like it came from a trusted sender.SecurityWeek
Critical1 Aug 2026
CareCloud
Healthcare · 3,700,000 records
3.7 million patients' medical records stolen in data breach, one of largest healthcare breaches this year
1 Aug 2026
High1 Aug 2026
Apollo
Finance · Records not stated
Private equity firm confirms data breach amid hacking wave targeting financial companies
1 Aug 2026
Critical1 Aug 2026
Conduent
Healthcare · 62,200,000 records
Data breach affects 62.2 million people, third-largest US healthcare hack ever
1 Aug 2026
High1 Aug 2026
Corporation Service Company (CSC)
Legal · Records not stated
Data breach exposed personal information prompting class action investigation
1 Aug 2026
High1 Aug 2026
Pokémon Center
Retail · Records not stated
Third-party data breach exposed customer information in UK and Germany
1 Aug 2026
High1 Aug 2026
Nova Scotia Power
Sector not stated · Records not stated
Three decades of customer information was hacked and not deleted as planned
1 Aug 2026
Critical1 Aug 2026
French Tax Authority
Government · Records not stated
Personal and tax information of 670,000 French taxpayers stolen
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Prolific hacking group claimed mass data theft from multiple organizations
1 Aug 2026
High1 Aug 2026
Uber Freight
Technology · Records not stated
Hacking group claimed data breach at Uber Freight logistics division
1 Aug 2026
High1 Aug 2026
Police National Legal Database
Government · Records not stated
Data theft confirmed; 135,000 contact records leaked on dark web by ExfilSquad
1 Aug 2026
Critical1 Aug 2026
Stripe Vendors
Technology · Records not stated
Data breach with 20,000 compromised APIs; sensitive data released on dark web
1 Aug 2026
Critical1 Aug 2026
Thailand Digital Ministry
Government · Records not stated
221 million login records exposed online; affects state systems
1 Aug 2026
High1 Aug 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Personal information of current and former employees accessed in data breach
1 Aug 2026
High1 Aug 2026
Comcast (Xfinity)
Technology · 35,000,000 records
Cyberattack exposed personal information of Xfinity customers, $117.5M settlement reached
1 Aug 2026
High1 Aug 2026
Bits of Gold
Finance · 200,000 records
Hackers breached support system exposing data of 200,000 customers at Israel's largest crypto broker
1 Aug 2026
Critical1 Aug 2026
Latvia Road Traffic Agency
Government · 1,200,000 records
Hackers stole data on 1.2 million people, approximately two-thirds of country's population
1 Aug 2026
Critical1 Aug 2026
CareCloud
Healthcare · 3,700,000 records
3.7 million patients' medical records stolen in cyberattack, one of largest healthcare breaches in US this year
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Government · 680,000 records
The disclosure as indexed does not name the organisation.
680,000 people impacted by theft of tax-related information in France
1 Aug 2026
High1 Aug 2026
SafePal
Finance · 40,000 records
40,000 customers affected by vulnerability exploitation in order-tracking plugin
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Personal and medical records including SSNs exposed in data breach
1 Aug 2026
High1 Aug 2026
Tribeca Festival
Sector not stated · Records not stated
Hundreds of thousands of records exposed including celebrity contact information
1 Aug 2026
Critical1 Aug 2026
France Tax Authority
Government · Records not stated
678,000 personal and financial tax records exposed in cyberattack
1 Aug 2026
Critical1 Aug 2026
RingCentral
Technology · 1,600,000 records
1.6 million customer records exposed in data breach by ShinyHunters group
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Woeful security led to sensitive data leak of criminal records
1 Aug 2026
Were you affected?