Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,447
Disclosures in the tracker, all years
2,033
Of those, indexed in 2026
86
Added in October
20
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 22 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

72 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United Kingdom16 Oct 2026Southville Primary School (Bristol City Council area)The source does not say how they got in.Hits Radio (West of England)
  2. United Kingdom13 Oct 2026TFG LondonThe source does not say how they got in.BleepingComputer
Critical1 Jun 2026
Thousands of NHS patient records
Healthcare · 900,000 records
Thousands of NHS patient records confirmed stolen in ransomware attack
1 Jun 2026
Critical1 Jun 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Thousands of patient records stolen during major ransomware attack
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack stole thousands of patient records in major healthcare cyberattack
1 Jun 2026
Critical1 Jun 2026
Elasticsearch database (infostealer logs)
Technology · Records not stated
Publicly exposed database leaked 24 billion stolen credentials, one of largest credential compilations
1 Jun 2026
Critical1 Jun 2026
Unnamed Elasticsearch database
Technology · Records not stated
Publicly exposed database leaked 24 billion stolen credentials, one of largest infostealer log compilations
1 Jun 2026
Critical1 Jun 2026
Elasticsearch Database (Public Exposure)
Technology · Records not stated
Publicly exposed Elasticsearch database leaked 24 billion stolen credentials, largest infostealer compilation
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen in major ransomware attack affecting Essex healthcare
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Ransomware attack stolen thousands of NHS patient records from Essex NHS trust
1 Jun 2026
Critical1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of patient records stolen in ransomware cyberattack on NHS trust
1 Jun 2026
High1 Jun 2026
Tchap (France Government)
Government · Records not stated
Messaging app breach hit 73,467 French government accounts in June 2026
1 Jun 2026
Critical1 Jun 2026
Elasticsearch Database (Unnamed Source)
Technology · Records not stated
Publicly exposed database leaked 24 billion stolen credentials in one of the largest infostealer compilations
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen during major ransomware attack affecting Essex healthcare trust
1 Jun 2026
Medium1 Jun 2026
Nichirei
Retail · Records not stated
Ransomware attack disrupted operations at Japanese frozen-food supplier and logistics firm
1 Jun 2026
Critical1 Jun 2026
Elasticsearch Database (Public)
Technology · Records not stated
24 billion stolen credentials leaked via publicly exposed Elasticsearch database in June 2026
1 Jun 2026
Critical1 Jun 2026
Elasticsearch database
Technology · Records not stated
Publicly exposed database leaked 24 billion stolen credentials in largest infostealer compilation
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Ransomware attack stole thousands of NHS patient records from Essex NHS trust
1 Jun 2026
Critical1 Jun 2026
Tchap
Government · Records not stated
France government messaging app breached in June 2026, exposing 73,467 government accounts
1 Jun 2026
Critical1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen in ransomware attack affecting multiple clinics
1 Jun 2026
Critical1 Jun 2026
Elasticsearch database (public)
Technology · Records not stated
24 billion stolen credentials leaked in publicly exposed database; one of largest infostealer log compilations
1 Jun 2026
High1 Jun 2026
Essex NHS Trust/Synnovis
Healthcare · 900,000 records
Thousands of NHS patient records stolen in ransomware cyberattack on Mid South Essex Foundation Trust
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of patient records stolen during major ransomware attack affecting NHS trust
1 Jun 2026
Critical1 Jun 2026
Ransomware attack
Healthcare · 1,300,000 records
Ransomware attack exposed protected health data of 1.3 million people to dark web
1 Jun 2026
Critical1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen during major ransomware attack
1 Jun 2026
High1 Jun 2026
Synnovis (NHS Essex)
Healthcare · 900,000 records
Thousands of NHS patient records stolen in ransomware cyberattack
1 Jun 2026
Were you affected?