Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,301
Disclosures in the tracker, all years
2,016
Of those, indexed in 2026
67
Added in October
19
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 19 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

65 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Germany6 Oct 2026Wikimedia FoundationHow they got in: automated AI tools that work through many organizations at once.The Hacker News
High6 Aug 2026
Loyalist College
Education · Records not stated
INC_RANSOM ransomware attack on Canadian college
6 Aug 2026
High6 Aug 2026
CareCloud Health
Healthcare · 350,000 records
350K patient SSNs and payment records stolen from AWS
6 Aug 2026
Critical6 Aug 2026
PNLD UK Police Database
Government · Records not stated
Police and government contact data published on dark web
6 Aug 2026
Critical6 Aug 2026
Craneware Group
Healthcare · Records not stated
Significant volume stolen from US hospital billing systems
6 Aug 2026
Medium6 Aug 2026
Meta AI model
Sector not stated · Records not stated
Meta has become the latest AI company to confirm that one of its models hacked a real organization during cybersecurity testing, as similar incidents continue to emerge following OpenAI'sOpenAI's initial disclosure…
6 Aug 2026
Medium6 Aug 2026
ThreatsDay
Technology · Records not stated
Apparently, opening the thing is now enough. A repo can run before the first prompt, a package can hide among hundreds, and a harmless-looking PDF can finish the job. This week runs on cheap leverage: exposed servers…
6 Aug 2026
High6 Aug 2026
Pennington County Attorney
Government · Records not stated
Government systems compromised in cyberattack
6 Aug 2026
High6 Aug 2026
WilmerHale Law Firm
Legal · Records not stated
Client SSNs and PII exposed in intrusion
6 Aug 2026
High6 Aug 2026
Klue Intelligence Platform
Technology · Records not stated
195-200 firms breached via legacy credential
6 Aug 2026
Critical6 Aug 2026
Nayax Fintech
Finance · Records not stated
100TB stolen including payment transaction records
6 Aug 2026
Critical6 Aug 2026
KDDI Email Platform
Technology · 14,200,000 records
14.2M email account records exposed
6 Aug 2026
Critical6 Aug 2026
Aflac Life Insurance Japan
Finance · 1,300,000 records
4.38M policyholders and bank accounts stolen
6 Aug 2026
Critical6 Aug 2026
Klue Supply Chain
Technology · 2,022 records
~200 firms breached via unrevoked 2022 credential
6 Aug 2026
Medium6 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Forescout found 22 internet-facing Rockwell Automation programmable logic controllers (PLCs) in cities hit by recent cyberattacks on US water utilities. Nineteen used the same mobile carrier network. Its August 3 scan…
6 Aug 2026
Medium6 Aug 2026
Liechtenstein Beneficial Register
Government · Records not stated
31K corporate ownership records breached
6 Aug 2026
Critical6 Aug 2026
Klue Supply Chain Breach
Technology · Records not stated
200 firms hit via stale OAuth credential
6 Aug 2026
Medium6 Aug 2026
The NL Times
Sector not stated · Records not stated
The NL Times reports: Online retailer Bol has warned customers about a data breach involving one of its logistics partners. The company said unauthorized parties accessed the partner’s systems, but emphasized…
6 Aug 2026
Medium6 Aug 2026
Organisation not named
Sector not stated · 100,000,000 records
The disclosure as indexed does not name the organisation.
A Canadian hacker has admitted involvement in the widespread compromise of 165 Snowflake customer accounts used to steal data and extort victims
6 Aug 2026
Medium6 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The incident involved a testing environment set up by Irregular, similar to what Anthropic reported last week. The post Meta AI Hacked External Systems During Cybersecurity Testing appeared first on SecurityWeek.
6 Aug 2026
Medium6 Aug 2026
Liechtenstein Government Register
Government · Records not stated
31K corporate beneficiary records breached
6 Aug 2026
Critical6 Aug 2026
DentaQuest Sun Life
Healthcare · Records not stated
2.6M Medicaid beneficiary records leaked
6 Aug 2026
Critical6 Aug 2026
NYC Health and Hospitals
Healthcare · 1,800,000 records
1.8M patient biometric and health records stolen
6 Aug 2026
High6 Aug 2026
GitHub
Technology · Records not stated
4,000 dev code repositories exfiltrated
6 Aug 2026
High6 Aug 2026
South Korea Diplomatic Academy
Government · Records not stated
6K diplomats PII stolen over 10 months
6 Aug 2026
Were you affected?