Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,324
Disclosures in the tracker, all years
2,038
Of those, indexed in 2026
86
Added in October
22
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 21 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

72 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. China20 Oct 2026Deere, SharkNinja and CumminsHow they got in: a known flaw in software the victim ran.The Hacker News
  2. China20 Oct 2026John DeereHow they got in: automated AI tools that work through many organizations at once.SecurityWeek
  3. China14 Oct 2026Hospitals and healthcare organizationsHow they got in: email made to look like it came from a trusted sender.SecurityWeek
Critical1 Aug 2026
Organisation not named
Technology · 165,000,000 records
The disclosure as indexed does not name the organisation.
Hacker stole data from 165+ Snowflake customers, billions of records compromised
1 Aug 2026
High1 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware gang stole data in attack; gang later confirmed data deletion
1 Aug 2026
High1 Aug 2026
Breach
Government · Records not stated
Breach exposed UK police, government and customer contact details on dark web
1 Aug 2026
High1 Aug 2026
River Financial Corporation
Finance · Records not stated
Ransomware attack stole data; hackers confirmed deletion
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised in on-premises Microsoft servers, SharePoint vulnerabilities suspected
1 Aug 2026
High1 Aug 2026
Liechtenstein AML Registry
Government · Records not stated
Attackers exfiltrated records on 31,000 legal entities from beneficial ownership registry
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patients exposed in PEAR ransomware attack on medical billing company
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Police, government and customer contact information compromised and exposed on dark web
1 Aug 2026
High1 Aug 2026
Aesto Health
Healthcare · Records not stated
Patient information exposed in data breach
1 Aug 2026
High1 Aug 2026
NYC Regional Center, LLC
Sector not stated · Records not stated
Data breach affecting personal information of unknown number of individuals
1 Aug 2026
Critical1 Aug 2026
Coinkite (Coldcard)
Finance · Records not stated
Bitcoin hardware wallet data breach; over $100M worth of bitcoin stolen
1 Aug 2026
High1 Aug 2026
Suno
Technology · Records not stated
Customer records exposed in data breach; some customers not notified
1 Aug 2026
Critical1 Aug 2026
Multiple financial firms
Finance · Records not stated
Hackers breaking into large U.S. financial firms to steal sensitive data and extort victims
1 Aug 2026
Critical1 Aug 2026
Brown Health Medical Group-MA
Healthcare · 311,000 records
311,000 people's personal, medical, and financial information stolen by hackers
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised through anomalies detected in on-premises Microsoft servers, SharePoint vulnerabilities suspected
1 Aug 2026
Critical1 Aug 2026
Police National Legal Database
Government · Records not stated
ExfilSquad stole 135,000 contact records and leaked on dark web
1 Aug 2026
Critical1 Aug 2026
Madera Community Hospital
Healthcare · 150,000 records
Extortion group stole personal, financial, and medical information of 150,000 patients
1 Aug 2026
High1 Aug 2026
SK Telecom
Technology · Records not stated
Massive data leak with compensation ordered at $67 per user by Korea's consumer agency
1 Aug 2026
High1 Aug 2026
Yearslong data breach of residents' private health-related information
Government · Records not stated
Yearslong data breach of residents' private health-related information
1 Aug 2026
High1 Aug 2026
Nissan
Sector not stated · Records not stated
SSNs and banking data stolen via Oracle zero-day
1 Aug 2026
High1 Aug 2026
FirstClass
Sector not stated · Records not stated
Australian travel agency customer records allegedly compromised in data breach
1 Aug 2026
Critical1 Aug 2026
Marquis Software Solutions
Finance · Records not stated
Ransomware attack exposes 788,000 financial records and sensitive customer data including names, addresses, card numbers
1 Aug 2026
Critical1 Aug 2026
Nayax Ltd
Finance · Records not stated
100TB claimed stolen in ransomware attack
1 Aug 2026
High1 Aug 2026
Law Firm (unnamed)
Legal · 13,000 records
Breached law firm exposed hospital records for nearly 13,000 patients in New Jersey
1 Aug 2026
Were you affected?