Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,324
Disclosures in the tracker, all years
2,038
Of those, indexed in 2026
86
Added in October
22
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 21 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

72 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United Kingdom16 Oct 2026Southville Primary School (Bristol City Council area)The source does not say how they got in.Hits Radio (West of England)
  2. United Kingdom13 Oct 2026TFG LondonThe source does not say how they got in.BleepingComputer
High1 Jul 2026
Law Firm (New Jersey)
Healthcare · 13,000 records
Hospital records of 13K patients exposed in cyberattack on law firm representing healthcare organizations
1 Jul 2026
High1 Jul 2026
Abbott/Exact Sciences
Healthcare · Records not stated
Patient personal and health information exposed from at-home diagnostic tests
1 Jul 2026
High1 Jul 2026
Breached Law Firm
Legal · 13,000 records
Cyberattack exposed hospital records for approximately 13,000 patients in New Jersey
1 Jul 2026
Critical1 Jul 2026
Partnered Health (Australian clinics)
Healthcare · Records not stated
Medical records including Medicare numbers, treatment details, and pathology results exposed on dark web
1 Jul 2026
High1 Jul 2026
Exact Sciences/Abbott
Healthcare · Records not stated
Data breach exposed sensitive personal information from at-home test users
1 Jul 2026
High1 Jul 2026
Department for Education (DfE)
Government · 607,000 records
Cyberattack exposed approximately 607,000 records
1 Jul 2026
High1 Jul 2026
Exact Sciences / Abbott
Healthcare · Records not stated
Patient sensitive and personal information exposed through at-home diagnostic tests
1 Jul 2026
High1 Jul 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack; data stolen and subsequently deleted by ransomware gang
1 Jul 2026
High1 Jul 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack with data deletion confirmation received from hacker gang
1 Jul 2026
Medium1 Jul 2026
KT Corp
Sector not stated · Records not stated
Rogue femtocell breach exposed 16,647 subscribers and stole SMS payment information.
1 Jul 2026
High1 Jul 2026
TD Bank
Finance · Records not stated
Data security incident affecting customers; separate newer breach disclosed July 2026
1 Jul 2026
Critical1 Jul 2026
Qantas
Sector not stated · 5,670,000 records
5.67M customer records exposed through vishing attack targeting tech support
1 Jul 2026
High1 Jul 2026
South Florida Injury Centers
Healthcare · 1,525 records
1,525 individuals affected; SSNs and medical records (PHI/PII) exposed
1 Jul 2026
High1 Jul 2026
Tribeca Festival
Sector not stated · Records not stated
Hundreds of thousands of records and celebrities' contact information exposed in data leak
1 Jul 2026
Critical1 Jul 2026
Charter Spectrum
Technology · 42,000,000 records
4.9M confirmed accounts breached; ShinyHunters claims 42M records stolen
1 Jul 2026
High1 Jul 2026
Partnered Health (Australia)
Healthcare · Records not stated
Personal information and medical details stolen from 21 clinics in cyber-attack
1 Jul 2026
Critical1 Jul 2026
Suno (AI Music Platform)
Technology · 55,000,000 records
Data breach exposed 55 million user accounts
1 Jul 2026
Critical1 Jul 2026
EY (Ernst & Young)
Finance · Records not stated
Tax records, Social Security numbers, and financial account codes exposed through compromised third-party help-desk platform
1 Jul 2026
High1 Jul 2026
Redtail Technology
Technology · Records not stated
Data breach exposed names, Social Security numbers, and account numbers
1 Jul 2026
Critical1 Jul 2026
Ernst & Young (EY)
Finance · Records not stated
ShinyHunters claimed breach exposing tax client data; vendor breach with 81-day notification delay
1 Jul 2026
Critical1 Jul 2026
Suno (AI music platform)
Technology · 55,000,000 records
Data breach exposed 55 million user accounts
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
Healthcare billing company in Augusta, Georgia exposed 1.26M patient records in PEAR ransomware attack
1 Jul 2026
Critical1 Jul 2026
Suno
Technology · 55,000,000 records
Data breach exposed 55 million user accounts at AI music platform
1 Jul 2026
High1 Jul 2026
Unnamed law firm
Legal · 13,000 records
Cyberattack exposed hospital patient records for 13,000 patients in New Jersey
1 Jul 2026
Were you affected?