Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,305
Disclosures in the tracker, all years
2,019
Of those, indexed in 2026
67
Added in October
19
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 19 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

65 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Germany6 Oct 2026Wikimedia FoundationHow they got in: automated AI tools that work through many organizations at once.The Hacker News
Medium7 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft attacks, known to impact Framework and Tally.
7 Aug 2026
Critical7 Aug 2026
Snowflake (165 breaches)
Technology · 165,000,000 records
Canadian hacker pleaded guilty to hacking data storage platform; 165 breaches resulted, 100M+ people affected
7 Aug 2026
High7 Aug 2026
Marquis (fintech firm)
Finance · 672,000 records
Ransomware attack stole names, addresses, card numbers and sensitive data affecting 672,000 records
7 Aug 2026
Critical7 Aug 2026
Snowflake (multiple customers)
Technology · 165,000,000 records
165+ breaches resulted from Snowflake hacking conspiracy affecting 100M+ people
7 Aug 2026
High7 Aug 2026
Yearslong data breach
Healthcare · Records not stated
Yearslong data breach exposed residents' private health-related information
7 Aug 2026
Critical7 Aug 2026
TriZetto (duplicate confirmation)
Healthcare · 3,400,000 records
Confirmed year-long hack of network exposed records on 3.4 million people
7 Aug 2026
Critical7 Aug 2026
Blue Cross Blue Shield
Healthcare · Records not stated
Massive data breach affecting health and insurance information; company delayed reporting to regulators
7 Aug 2026
Critical7 Aug 2026
US Civil Service
Government · Records not stated
Thousands of civil servants' passwords exposed since early 2024, including White House-linked credentials
7 Aug 2026
Critical7 Aug 2026
Cyber attack
Government · 607,000 records
Cyber attack exposed approximately 607,000 records
7 Aug 2026
Critical7 Aug 2026
Snowflake (via hacks)
Technology · 165,000,000 records
165 breaches affecting over 100 million people via compromised Snowflake platform; Canadian hacker Connor Riley Moucka pleaded guilty
7 Aug 2026
High7 Aug 2026
TD Bank
Finance · Records not stated
Data security incident affecting customer information, separate newer breach in 2026
7 Aug 2026
Critical7 Aug 2026
Queensland Schools
Education · Records not stated
Major cyber breach affecting tens of thousands of students and teachers via education technology platform
7 Aug 2026
High7 Aug 2026
FirstClass Travel Agency
Sector not stated · Records not stated
Alleged data breach of customer records by threat actor on underground hacking forums
7 Aug 2026
Critical7 Aug 2026
TriZetto (Healthcare Tech Provider)
Healthcare · Records not stated
More than 3 million Americans impacted by 2024 breach affecting multiple states
7 Aug 2026
High7 Aug 2026
Transport for London
Government · Records not stated
Cyberattack on heart of London transport network; cost £39 million; two hackers sentenced
7 Aug 2026
Medium7 Aug 2026
Liechtenstein Beneficiary Register
Government · Records not stated
31K corporate beneficiary records exposed
7 Aug 2026
Critical7 Aug 2026
Snowflake Inc.
Technology · 165,000,000 records
Massive data breach involving customer data theft and extortion
7 Aug 2026
High7 Aug 2026
Gaming Platforms (multiple)
Technology · Records not stated
Data leaks exposed over 11 million gaming account credentials including login information
7 Aug 2026
High7 Aug 2026
Partnered Health (Australian Clinics)
Healthcare · Records not stated
Cyber-attack exposed medical records including Medicare numbers and pathology results
7 Aug 2026
High7 Aug 2026
U.S. Civil Service
Government · Records not stated
Thousands of civil servants passwords exposed since early 2024, including White House credentials
7 Aug 2026
Critical7 Aug 2026
VITAS Hospice Services
Healthcare · 300,000 records
300K patient records exposed via vendor account
7 Aug 2026
Critical7 Aug 2026
NYC Health Hospitals
Healthcare · 1,800,000 records
1.8M patient records and biometric data stolen
7 Aug 2026
Medium7 Aug 2026
Levi Strauss & Co.
Sector not stated · Records not stated
Levi Strauss & Co. (Levi's) says that hackers used social engineering on three of its employees to gain access to and steal corporate data stored on their machines.
7 Aug 2026
Medium7 Aug 2026
Alcino Donadel
Education · Records not stated
Alcino Donadel reports: …. Instructure, the edtech company behind learning management system Canvas, suffered one of the largest data breaches in the U.S. this year after cybercriminals gained access through a…
7 Aug 2026
Were you affected?