Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,339
Disclosures in the tracker, all years
2,052
Of those, indexed in 2026
111
Added in October
18
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 25 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

74 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. France20 Oct 2026US tax preparation businessesThe source does not say how they got in.The Record
High1 Jun 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135K contact records including police and government contacts leaked on dark web
1 Jun 2026
High1 Jun 2026
University of Western Australia
Education · Records not stated
Student records accidentally leaked in second breach within six months
1 Jun 2026
High1 Jun 2026
Sangamon County
Government · Records not stated
Platinum Technology data incident affected voters
1 Jun 2026
Critical1 Jun 2026
SplitVPN
Technology · 865,000 records
Data breach exposed personal records of approximately 865,000 users of the Russian VPN provider (formerly NotVPN)
1 Jun 2026
High1 Jun 2026
Fairlife (Coca-Cola)
Retail · Records not stated
Ransomware attack shut down dairy operations; disclosed to SEC
1 Jun 2026
Critical1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen in major ransomware attack affecting healthcare systems
1 Jun 2026
High1 Jun 2026
New Jersey Law Firm
Legal · 13,000 records
Cyberattack on law firm exposed hospital records for nearly 13,000 patients
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Ransomware attack stole thousands of NHS patient records in Essex healthcare trust
1 Jun 2026
Critical1 Jun 2026
Elasticsearch Database
Technology · Records not stated
Publicly exposed database leaked 24 billion stolen credentials from infostealer logs
1 Jun 2026
High1 Jun 2026
FirstClass (Australian travel agency)
Sector not stated · Records not stated
Customer records allegedly breached; threat actor claimed responsibility on underground forums
1 Jun 2026
Critical1 Jun 2026
Essex NHS
Healthcare · 900,000 records
Thousands of patient records stolen in cyber attack, breach disclosed 6+ months after notification
1 Jun 2026
High1 Jun 2026
Synnovis/Mid South Essex NHS
Healthcare · 900,000 records
Thousands of NHS patient records confirmed stolen in ransomware cyberattack
1 Jun 2026
High1 Jun 2026
Valley Kidney Specialists
Healthcare · Records not stated
Data breach exposed personal and health information from medical records
1 Jun 2026
Critical1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen in major ransomware attack disrupting healthcare services
1 Jun 2026
Critical1 Jun 2026
Partnered Health (Australian clinics)
Healthcare · Records not stated
Medical records breached including Medicare numbers, treatment details, and pathology results exposed on dark web.
1 Jun 2026
High1 Jun 2026
Hugging Face
Technology · Records not stated
Internal datasets and credentials compromised in breach, users urged to rotate access tokens
1 Jun 2026
High1 Jun 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Police and government contact details including names and emails leaked on dark web
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen during major ransomware attack affecting healthcare services
1 Jun 2026
Critical1 Jun 2026
Department for Education (DfE)
Government · 607,000 records
Cyber attack exposed 607,000 records
1 Jun 2026
High1 Jun 2026
Coca-Cola (Dairy Operations)
Retail · Records not stated
Ransomware attack shut down dairy operations; data breach disclosed to SEC
1 Jun 2026
High1 Jun 2026
Synnovis
Healthcare · 900,000 records
Thousands of NHS patient records stolen during major ransomware attack affecting Mid South Essex Foundation Trust
1 Jun 2026
Critical1 Jun 2026
Amgen
Healthcare · Records not stated
Patient health data and IP stolen in cybersecurity breach; cloud environment compromised
1 Jun 2026
Critical1 Jun 2026
Origin Energy
Sector not stated · 2,000,000 records
Customer data leak in cyberattack; 2 million records stolen
1 Jun 2026
Critical1 Jun 2026
Coca-Cola (Fairlife)
Retail · Records not stated
Ransomware attack shut down dairy operations; disclosure filed with SEC
1 Jun 2026
Were you affected?