Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,319
Disclosures in the tracker, all years
2,034
Of those, indexed in 2026
89
Added in October
23
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 22 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

72 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Germany21 Oct 2026IQ.LvbsThe source does not say how they got in.The Register
High24 Aug 2020
Stortinget (Norwegian Parliament)
Government · Records not stated
State-sponsored actors breached parliamentary email system twice in a year
24 Aug 2020
Medium24 Aug 2020
Haywood County Schools (NC)
Education · Records not stated
35K student records exposed in SunCrypt ransomware
24 Aug 2020
Critical22 Aug 2020
LiveAuctioneers
Retail · 3,385,862 records
3,385,862 records exposed, Email addresses, IP addresses, Names, Passwords and 3 more
22 Aug 2020
High20 Aug 2020
SK Hynix (Korea)
Technology · Records not stated
Maze ransomware stole 11TB from memory chip maker, product specs exposed
20 Aug 2020
High19 Aug 2020
Utah Gun Exchange
Finance · 235,233 records
235,233 records exposed, Email addresses, Genders, IP addresses, Passwords and 1 more
19 Aug 2020
High19 Aug 2020
Unico Campania
Technology · 166,031 records
166,031 records exposed, Email addresses, Passwords
19 Aug 2020
Critical19 Aug 2020
Experian South Africa
Finance · Records not stated
24M South African consumer and 793,000 business records exposed to fraudster
19 Aug 2020
Critical19 Aug 2020
Experian (partner breach)
Finance · Records not stated
24M South African records, plus US consumer data at risk
19 Aug 2020
High18 Aug 2020
Sonicbids
Retail · 751,700 records
751,700 records exposed, Email addresses, Names, Passwords, Usernames
18 Aug 2020
Critical18 Aug 2020
Catho
Government · 1,173,012 records
1,173,012 records exposed, Email addresses, Names, Passwords, Usernames
18 Aug 2020
Critical15 Aug 2020
CRA (Canada Revenue Agency)
Government · 11,200 records
GCKey and CRA credential stuffing, 11,200 accounts compromised
15 Aug 2020
High15 Aug 2020
Canada Revenue Agency (CRA)
Government · 13,000 records
13,000 accounts compromised via credential stuffing, GCKey and CRA MyAccount portals
15 Aug 2020
Medium15 Aug 2020
Michigan Medicine
Education · 33,000 records
33K patient records exposed in email breach
15 Aug 2020
High15 Aug 2020
Brown-Forman (Jack Daniels)
Sector not stated · Records not stated
REvil ransomware stole 1TB of internal data
15 Aug 2020
Critical15 Aug 2020
Carnival Corporation
Technology · 1,500,000 records
1.5M customer records exposed in ransomware affecting cruise lines
15 Aug 2020
High14 Aug 2020
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
9,041 GCKey credentials used in credential stuffing, RCMP, CRA, IRCC accounts accessed
14 Aug 2020
High14 Aug 2020
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
9,041 GCKey credentials used in credential stuffing, RCMP, CRA, IRCC accounts accessed
14 Aug 2020
High14 Aug 2020
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
9,041 GCKey credentials used in credential stuffing, RCMP, CRA, IRCC accounts accessed
14 Aug 2020
High14 Aug 2020
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
9,041 GCKey credentials used in credential stuffing, RCMP, CRA, IRCC accounts accessed
14 Aug 2020
High14 Aug 2020
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
9,041 GCKey credentials used in credential stuffing, RCMP, CRA, IRCC accounts accessed
14 Aug 2020
High14 Aug 2020
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
9,041 GCKey credentials used in credential stuffing, RCMP, CRA, IRCC accounts accessed
14 Aug 2020
High14 Aug 2020
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
9,041 GCKey credentials used in credential stuffing, RCMP, CRA, IRCC accounts accessed
14 Aug 2020
High14 Aug 2020
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
9,041 GCKey credentials used in credential stuffing, RCMP, CRA, IRCC accounts accessed
14 Aug 2020
High14 Aug 2020
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
9,041 GCKey credentials used in credential stuffing, RCMP, CRA, IRCC accounts accessed
14 Aug 2020
Were you affected?