Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,475
Disclosures in the tracker, all years
2,009
Of those, indexed in 2026
58
Added in October
14
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 19 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

65 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Germany6 Oct 2026Wikimedia FoundationHow they got in: automated AI tools that work through many organizations at once.The Hacker News
Critical11 Aug 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
The hackers claimed to have exfiltrated 6 terabytes of data, including highly sensitive health information like records related to sexual assault, mental health, abortions and sexual harassment incidents.
11 Aug 2026
Critical11 Aug 2026
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
The ransomware group known as DeadLock has been observed using decentralized infrastructure to facilitate victim communications and data leak operations in a bid to improve operational resilience. "Its recovery…
11 Aug 2026
Medium11 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Supply chain attack and data breach at Ceva Logistics appears to have a large blast radius
11 Aug 2026
Medium11 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
A malicious tool server connected to an AI coding assistant can quietly walk off with SSH keys, environment secrets, source code, and customer data without ever sending one obviously harmful instruction. The trick can…
11 Aug 2026
Medium11 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Operations at eight European warehouses belonging to France's CEVA Logistics have reportedly been disrupted by a cyberattack, and several other companies are feeling the effects.
11 Aug 2026
Critical11 Aug 2026
Ransomware attack in 2025
Healthcare · 1,200,000 records
Ransomware attack in 2025 exposed personal data of 1.2 million people
11 Aug 2026
High11 Aug 2026
Craneware
Healthcare · Records not stated
Healthcare software vendor data breach exposing customer data in supply-chain attack
11 Aug 2026
Critical11 Aug 2026
VITAS Hospice Services
Healthcare · 319,000 records
319K patient records stolen via vendor account
11 Aug 2026
Critical11 Aug 2026
CareCloud Health Software
Healthcare · 345,000 records
345K patient records stolen from EHR systems
11 Aug 2026
Critical11 Aug 2026
100K+ police officer records exfiltrated
Government · Records not stated
100K+ police officer records exfiltrated
11 Aug 2026
High11 Aug 2026
Cure Dental
Healthcare · Records not stated
Dental provider data breach exposed PII of current and former patients
11 Aug 2026
Critical11 Aug 2026
MCBS
Healthcare · 1,200,000 records
Medical business management company data breach exposed personal information of 1.2 million individuals
11 Aug 2026
Critical11 Aug 2026
135K law enforcement contact records exfiltrated
Government · Records not stated
135K law enforcement contact records exfiltrated
11 Aug 2026
High11 Aug 2026
Cure Dental
Healthcare · Records not stated
Dental practice data breach exposed PII of current and former patients
11 Aug 2026
High11 Aug 2026
Chick-fil-A
Retail · Records not stated
Customer loyalty accounts compromised; hackers accessed names, emails using stolen credentials across multiple states
11 Aug 2026
High11 Aug 2026
Clover Health
Healthcare · Records not stated
Health insurer data breach disclosed; type and extent of exposed data unknown at disclosure
11 Aug 2026
Critical11 Aug 2026
Ceva Logistics
Sector not stated · Records not stated
Shipping company data breach exposed personal data of customers across banks, retailers, and gamers
11 Aug 2026
Critical11 Aug 2026
100K+ officer contact records exfiltrated
Government · Records not stated
100K+ officer contact records exfiltrated
11 Aug 2026
Critical11 Aug 2026
AnMed Health System
Healthcare · Records not stated
83 facilities closed in ongoing ransomware attack
11 Aug 2026
Critical11 Aug 2026
Loyalist College Ontario
Education · Records not stated
Student and staff data stolen in ransomware
11 Aug 2026
Critical11 Aug 2026
CareCloud Health Platform
Healthcare · 345,000 records
345K patient SSNs and payment records stolen
11 Aug 2026
High11 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Hackers breached facility supplying heat to 50,000 residents via private APN
11 Aug 2026
High11 Aug 2026
Cerner
Healthcare · Records not stated
Patient data breach at healthcare systems affecting Huntsville Hospital Health System
11 Aug 2026
Critical11 Aug 2026
MCBS
Healthcare · 1,200,000 records
Medical business management company data breach exposed over 1.2 million individuals' records
11 Aug 2026
Were you affected?