Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,324
Disclosures in the tracker, all years
2,038
Of those, indexed in 2026
86
Added in October
22
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 21 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

72 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Germany21 Oct 2026IQ.LvbsThe source does not say how they got in.The Register
High1 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Network intrusion on Homeland Security Information Network supporting World Cup games
1 Jul 2026
High1 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Network intrusion and data breach confirmed after initially ruled false positives
1 Jul 2026
Critical1 Jul 2026
MCBS Medical
Healthcare · 1,260,000 records
Medical billing company; 1.26 million patients exposed in PEAR ransomware attack affecting healthcare billing data
1 Jul 2026
High1 Jul 2026
Department for Education
Education · Records not stated
Data breach claimed by ExfilSquad group in ransomware attack
1 Jul 2026
Critical1 Jul 2026
Fortinet (FortiBleed campaign)
Technology · Records not stated
73,000+ FortiGate firewalls and VPN gateways exposed with valid admin and VPN credentials
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patients exposed in PEAR ransomware attack on healthcare billing company
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
Healthcare billing company ransomware attack exposed 1.26 million patient records in PEAR ransomware attack.
1 Jul 2026
High1 Jul 2026
KT (Korean Telecommunications)
Technology · Records not stated
Personal data breach and unauthorized micropayment damages via illegal base stations
1 Jul 2026
High1 Jul 2026
Department for Homeland Security
Government · Records not stated
Network intrusion on Homeland Security Information Network confirmed after false positives
1 Jul 2026
Critical1 Jul 2026
PEAR ransomware attack on medical billing company
Healthcare · 1,260,000 records
PEAR ransomware attack on medical billing company exposed 1.26 million patient records
1 Jul 2026
High1 Jul 2026
Network intrusion on Homeland Security Information Network
Government · Records not stated
Network intrusion on Homeland Security Information Network confirmed after false positives
1 Jul 2026
High1 Jul 2026
Cerner (Huntsville Hospital)
Healthcare · Records not stated
Patient data compromised through third-party vendor breach at Huntsville Hospital Health System
1 Jul 2026
Critical1 Jul 2026
Healthcare billing company
Healthcare · 1,260,000 records
Healthcare billing company exposed 1.26 million patient records in PEAR ransomware attack
1 Jul 2026
High1 Jul 2026
Department of Homeland Security
Government · Records not stated
Network intrusion confirmed on HSIN used for World Cup operations
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patient records exposed in PEAR ransomware attack on billing company
1 Jul 2026
Critical1 Jul 2026
Puerto Rico Government Agency
Government · Records not stated
Cybersecurity loophole in government mapping service exposed 1 million social security numbers
1 Jul 2026
High1 Jul 2026
KT Corporation
Technology · Records not stated
Personal data breach via illegal base stations caused unauthorized micropayments
1 Jul 2026
High1 Jul 2026
Coca-Cola (Fairlife subsidiary)
Sector not stated · Records not stated
Ransomware attack resulted in theft of company data from dairy subsidiary
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patients exposed in PEAR ransomware attack on healthcare billing and practice-management company
1 Jul 2026
Critical1 Jul 2026
MCBS Medical Billing
Healthcare · 1,260,000 records
1.26 million patients exposed in PEAR ransomware attack on billing and practice-management systems
1 Jul 2026
High1 Jul 2026
Hospital software vendor
Healthcare · Records not stated
Customer data breach from major healthcare software vendor via supply-chain attack
1 Jul 2026
Critical1 Jul 2026
Fortinet
Technology · Records not stated
FortiBleed campaign; 73,000+ devices affected; verified administrator credentials and VPN data exposed
1 Jul 2026
High1 Jul 2026
Evanston Township High School
Education · Records not stated
Cyberattack disrupted phone systems; students and parents advised to use email
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patients exposed in PEAR ransomware attack on billing system
1 Jul 2026
Were you affected?