Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,339
Disclosures in the tracker, all years
2,052
Of those, indexed in 2026
111
Added in October
18
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 25 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

74 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Germany21 Oct 2026IQ.LvbsThe source does not say how they got in.The Register
Critical1 Mar 2026
LiteLLM
Technology · Records not stated
Supply chain attack exposed over 430,000 CI/CD pipelines affecting over 2,500 organizations
1 Mar 2026
Critical1 Mar 2026
Conduent
Sector not stated · Records not stated
Breach compromised personal data of millions nationwide, notifications sent a year later
1 Mar 2026
Critical1 Mar 2026
Organisation not named
Healthcare · 1,200,000 records
The disclosure as indexed does not name the organisation.
Ransomware attack exposing personal data of 1.2 million individuals
1 Mar 2026
Critical1 Mar 2026
GuardDog
Healthcare · Records not stated
Telehealth company accessed and shared patient medical records from Epic platform with law firms without authorization
1 Mar 2026
Critical1 Mar 2026
CISA (US Agency)
Government · Records not stated
Breached through Cisco vulnerability, FIRESTARTER backdoor allowed persistent access through March
1 Mar 2026
Critical1 Mar 2026
Marquis
Finance · 672,000 records
Ransomware attack stole personal and financial data of over 672,000 people from fintech company
1 Mar 2026
High1 Mar 2026
Organisation not named
Education · Records not stated
The disclosure as indexed does not name the organisation.
Driver's license numbers and voter information from Multiethnic Cohort Study exposed in ransomware attack
1 Mar 2026
Critical1 Mar 2026
Fortinet FortiGate
Technology · Records not stated
73,932 FortiGate systems exposed with valid administrative and VPN credentials
1 Mar 2026
High1 Mar 2026
Multiethnic Cohort Study data
Education · Records not stated
Multiethnic Cohort Study data leaked following ransomware attack including driver's license numbers
1 Mar 2026
Critical1 Mar 2026
CISA (US Government)
Government · Records not stated
US agency breached through Cisco vulnerability, FIRESTARTER backdoor malware allowed persistent access through March
1 Mar 2026
High1 Mar 2026
Ransomware attack data
Education · Records not stated
Ransomware attack data leak from Multiethnic Cohort Study exposed driver's license numbers and voter registration data
1 Mar 2026
Critical1 Mar 2026
TriZetto (Year-long hack)
Healthcare · 3,400,000 records
Year-long network hack exposed records on 3.4 million people
1 Mar 2026
High1 Mar 2026
Foster City Government
Government · Records not stated
Ransomware attack forced city computer systems offline for days
1 Mar 2026
Critical1 Mar 2026
CISA (US Department)
Government · Records not stated
Breached through Cisco vulnerability; FIRESTARTER backdoor allowed persistent access through March 2026
1 Mar 2026
High1 Mar 2026
Partnered Health
Healthcare · Records not stated
Personal information and medical details breached across 21 clinics in Australian healthcare provider attack
1 Mar 2026
High1 Mar 2026
Organisation not named
Legal · 13,000 records
The disclosure as indexed does not name the organisation.
13,000 patient records in New Jersey exposed through cyberattack on law firm representing state hospitals
1 Mar 2026
High1 Mar 2026
Ransomware attack resulted in data
Education · Records not stated
Ransomware attack resulted in data leak including driver's license numbers and voter registration data
1 Mar 2026
Critical1 Mar 2026
Canada Life
Finance · 5,500,000 records
Threat actor claimed 5.5 million records allegedly tied to Canada's biggest insurer for sale on cybercrime marketplace
1 Mar 2026
High1 Mar 2026
Ericsson
Technology · 15,661 records
Vishing attack exposed data of 15,661 people including SSNs, financial and medical records
1 Mar 2026
High1 Mar 2026
Lehigh Carbon Community College
Education · Records not stated
Data breach caused extended school closure, extent of exposure unclear
1 Mar 2026
Critical1 Mar 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
US agency breached through Cisco vulnerability; FIRESTARTER backdoor allowed persistent access through March 2026
1 Mar 2026
High1 Mar 2026
Ransomware attack caused data
Healthcare · Records not stated
Ransomware attack caused data leak exposing patient information from Multiethnic Cohort Study including driver's license and voter data
1 Mar 2026
Critical1 Mar 2026
IDMerit
Technology · Records not stated
Unprotected database exposed 1 billion identity records used by banks and identity verification
1 Mar 2026
High1 Mar 2026
CareCloud
Healthcare · Records not stated
Healthcare software firm informed SEC of potential patient data leak; electronic health records may have been leaked after system intrusion
1 Mar 2026
Were you affected?