Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,319
Disclosures in the tracker, all years
2,034
Of those, indexed in 2026
87
Added in October
21
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 22 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

72 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. China20 Oct 2026Deere, SharkNinja and CumminsHow they got in: a known flaw in software the victim ran.The Hacker News
  2. China20 Oct 2026John DeereHow they got in: automated AI tools that work through many organizations at once.SecurityWeek
  3. China14 Oct 2026Hospitals and healthcare organizationsHow they got in: email made to look like it came from a trusted sender.SecurityWeek
Critical9 Jul 2026
NYC Health Hospitals
Healthcare · 1,800,000 records
1.8M patient records exposed via vendor compromise
9 Jul 2026
Critical9 Jul 2026
Canvas LMS Instructure
Education · 275,000,000 records
275M user records stolen across 8000 institutions
9 Jul 2026
High9 Jul 2026
Liberty Mutual Insurance
Finance · Records not stated
108GB policyholder and financial records exfiltrated
9 Jul 2026
High9 Jul 2026
French Tchap Platform
Government · Records not stated
73K government accounts and 643K messages stolen
9 Jul 2026
High9 Jul 2026
VIQ Solutions
Legal · Records not stated
Court transcripts stolen via rogue subcontractor
9 Jul 2026
Critical9 Jul 2026
Charter Communications Spectrum
Technology · 40,000,000 records
40M customer records stolen via vishing attack
9 Jul 2026
Critical9 Jul 2026
Credential Dump Global
Technology · Records not stated
24B stolen credentials exposed in public database
9 Jul 2026
Critical9 Jul 2026
One Medical Senior Care
Healthcare · Records not stated
Archived elderly patient clinical records breached
9 Jul 2026
Critical9 Jul 2026
Navia Benefits
Finance · Records not stated
2.7M SSNs and benefits enrollment records exposed
9 Jul 2026
High9 Jul 2026
Basic-Fit
Retail · Records not stated
1M members' bank and PII data breached
9 Jul 2026
Critical9 Jul 2026
NYC Health + Hospitals
Healthcare · 1,800,000 records
1.8M records stolen including biometrics
9 Jul 2026
Critical9 Jul 2026
Texas Parks Wildlife Dept
Government · Records not stated
3M license holders PII exposed via vendor breach
9 Jul 2026
Critical9 Jul 2026
Charter Communications
Technology · 40,000,000 records
40M customer records exfiltrated by ShinyHunters
9 Jul 2026
Critical9 Jul 2026
AdaptHealth Corp
Healthcare · Records not stated
Patient PHI and billing credentials accessed
9 Jul 2026
Critical9 Jul 2026
Canada House of Commons
Government · Records not stated
Employee PII stolen via Microsoft SharePoint zero-day
9 Jul 2026
High9 Jul 2026
Nissan North America
Sector not stated · Records not stated
Employee SSNs stolen via Oracle PeopleSoft flaw
9 Jul 2026
Critical9 Jul 2026
700Credit
Finance · Records not stated
5.8M automotive finance SSNs stolen via API
9 Jul 2026
Critical9 Jul 2026
US DHS HSIN
Government · Records not stated
Federal threat intel platform breached for weeks
9 Jul 2026
Critical9 Jul 2026
Global Credential Mega-Dump
Technology · 24,000,000,000 records
24B credential records from 36 infostealer sources
9 Jul 2026
Critical9 Jul 2026
Instructure Canvas
Education · 275,000,000 records
275M records across 9K institutions stolen
9 Jul 2026
Critical9 Jul 2026
Oracle PeopleSoft CVE-2026-35273
Technology · 3,000,000 records
300+ instances hit, 100+ orgs, HR/payroll data stolen
9 Jul 2026
Critical9 Jul 2026
Klue Supply Chain Breach
Technology · Records not stated
200 firms hit via stolen OAuth tokens and CRM keys
9 Jul 2026
Critical9 Jul 2026
24B credential records from 36 breach sources exposed
Sector not stated · 24,000,000,000 records
24B credential records from 36 breach sources exposed
9 Jul 2026
Critical9 Jul 2026
World Cup security planning data exposed via HSIN
Government · Records not stated
World Cup security planning data exposed via HSIN
9 Jul 2026
Were you affected?