Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,324
Disclosures in the tracker, all years
2,038
Of those, indexed in 2026
86
Added in October
20
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 22 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

72 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United Kingdom16 Oct 2026Southville Primary School (Bristol City Council area)The source does not say how they got in.Hits Radio (West of England)
  2. United Kingdom13 Oct 2026TFG LondonThe source does not say how they got in.BleepingComputer
High1 Jun 2026
FirstClass
Retail · Records not stated
Sydney-based travel agency hit by alleged data breach with customer records leaked by threat actor
Our recordOriginal disclosure
1 Jun 2026
Critical1 Jun 2026
Canada Life
Finance · 5,500,000 records
5.5 million records allegedly compromised and offered for sale on underground cybercrime forum
Our recordOriginal disclosure
1 Jun 2026
High1 Jun 2026
Organisation not named
Education · Records not stated
The disclosure as indexed does not name the organisation.
Second data breach in six months; student records accidentally leaked
Our recordOriginal disclosure
1 Jun 2026
High1 Jun 2026
Fortinet
Technology · Records not stated
74,000 Fortinet firewall and VPN gateway credentials stolen from configuration files in FortiBleed leak
Our recordOriginal disclosure
1 Jun 2026
Critical1 Jun 2026
Coupang
Retail · 33,700,000 records
Data breach exposed 33.7 million accounts, resulted in $409M fine from South Korea
Our recordOriginal disclosure
1 Jun 2026
High1 Jun 2026
Huntsville Hospital Health System
Healthcare · Records not stated
Patient data compromised in third-party breach related to Cerner system
Our recordOriginal disclosure
1 Jun 2026
Critical1 Jun 2026
Fortinet
Technology · Records not stated
FortiBleed: 73,932 FortiGate firewall devices exposed with admin and VPN credentials compromised
Our recordOriginal disclosure
1 Jun 2026
Critical1 Jun 2026
Novo Nordisk
Healthcare · Records not stated
Cyber extortion group claimed breach; over 1TB of data stolen, $25M extortion attempted
Our recordOriginal disclosure
1 Jun 2026
Critical1 Jun 2026
Fortinet
Technology · Records not stated
FortiBleed campaign exposed admin and VPN credentials for 73,932 FortiGate firewalls and VPN gateways
Our recordOriginal disclosure
1 Jun 2026
Critical1 Jun 2026
Novo Nordisk
Healthcare · Records not stated
Cyber extortion group claimed theft of over 1 terabyte of data with $25 million extortion attempt
Our recordOriginal disclosure
1 Jun 2026
Critical1 Jun 2026
Charter Communications
Technology · 42,000,000 records
Data breach exposed 42 million customer records after ShinyHunters extortion threat
Our recordOriginal disclosure
1 Jun 2026
High1 Jun 2026
LastPass
Technology · Records not stated
Data breach confirmed affecting customer data through third-party vendor compromise
Our recordOriginal disclosure
1 Jun 2026
Critical1 Jun 2026
Odido
Sector not stated · 6,500,000 records
ShinyHunters stole 6.5M customer records and demanded €1M ransom
Our recordOriginal disclosure
1 Jun 2026
High1 Jun 2026
FirstClass
Retail · Records not stated
Travel agency customer records allegedly breached and leaked on underground hacking forums
Our recordOriginal disclosure
1 Jun 2026
High1 Jun 2026
Veradigm
Healthcare · Records not stated
Electronic health records company disclosed customer data stolen after hackers infiltrated vendor's systems
Our recordOriginal disclosure
1 Jun 2026
High1 Jun 2026
Essex NHS Trust
Healthcare · 900,000 records
Thousands of patient records stolen in cyber attack, disclosed more than six months after notification
Our recordOriginal disclosure
1 Jun 2026
Critical1 Jun 2026
Elasticsearch database (unnamed organization)
Technology · Records not stated
Publicly exposed database leaked 24 billion stolen credentials, one of largest infostealer compilations
Our recordOriginal disclosure
1 Jun 2026
High1 Jun 2026
Partnered Health
Healthcare · Records not stated
Australian GP network breach exposed patient records reaching dark web
Our recordOriginal disclosure
1 Jun 2026
High1 Jun 2026
Huntsville Hospital Health System
Healthcare · Records not stated
Third-party data breach exposed patient information across hospital facilities
Our recordOriginal disclosure
1 Jun 2026
Critical1 Jun 2026
Fortinet
Technology · Records not stated
FortiBleed breach exposed credentials for 73,932 FortiGate systems including admin and VPN credentials
Our recordOriginal disclosure
1 Jun 2026
High1 Jun 2026
FirstClass
Retail · Records not stated
Australian travel agency customer records allegedly breached by threat actor on underground forums
Our recordOriginal disclosure
1 Jun 2026
Critical1 Jun 2026
Medical billing company
Healthcare · 1,300,000 records
2025 ransomware attack exposed sensitive health data on 1.3 million people leaked to dark web
Our recordOriginal disclosure
1 Jun 2026
High1 Jun 2026
Partnered Health
Healthcare · Records not stated
Patient records exposed in breach at Australian primary healthcare provider network
Our recordOriginal disclosure
1 Jun 2026
Critical1 Jun 2026
Fortinet
Technology · Records not stated
FortiBleed campaign exposed verified administrator credentials and VPN access for over 73,000 FortiGate firewall devices globally
Our recordOriginal disclosure
1 Jun 2026
Were you affected?