Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,447
Disclosures in the tracker, all years
2,033
Of those, indexed in 2026
86
Added in October
20
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 22 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

72 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United Kingdom16 Oct 2026Southville Primary School (Bristol City Council area)The source does not say how they got in.Hits Radio (West of England)
  2. United Kingdom13 Oct 2026TFG LondonThe source does not say how they got in.BleepingComputer
Critical1 Jun 2026
Puerto Rico Government Agency
Government · Records not stated
Cybersecurity loophole exposed 1 million social security numbers in mapping service
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen during ransomware attack
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of patient records stolen in ransomware attack affecting NHS trust
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen in ransomware cyberattack on Essex healthcare provider
1 Jun 2026
High1 Jun 2026
Synnovis/NHS Mid South Essex
Healthcare · 900,000 records
Thousands of NHS patient records stolen in ransomware cyberattack on healthcare trust
1 Jun 2026
High1 Jun 2026
Partnered (Australian clinics)
Healthcare · Records not stated
Cyber-attack exposing sensitive medical records including Medicare numbers, treatment details, pathology results
1 Jun 2026
High1 Jun 2026
Cyberattack on law firm
Legal · 13,000 records
Cyberattack on law firm exposed hospital records for nearly 13,000 patients in New Jersey
1 Jun 2026
High1 Jun 2026
Ransomware cyberattack
Healthcare · Records not stated
Ransomware cyberattack exposed thousands of patient records
1 Jun 2026
Critical1 Jun 2026
Unknown (Elasticsearch)
Technology · Records not stated
Publicly exposed Elasticsearch database with 24 billion stolen credential records accessible to anyone
1 Jun 2026
Critical1 Jun 2026
Medical Billing Company (unnamed)
Healthcare · 1,300,000 records
Ransomware attack in 2025 exposed protected health data on 1.3 million people, leaked to dark web
1 Jun 2026
Medium1 Jun 2026
Evanston Township High School
Education · Records not stated
Ransomware attack disrupted phone systems and network services
1 Jun 2026
Critical1 Jun 2026
Synnovis/NHS (Essex)
Healthcare · 900,000 records
Thousands of NHS patient records stolen in ransomware attack affecting Mid South Essex Foundation Trust
1 Jun 2026
High1 Jun 2026
Valve
Technology · Records not stated
European logistics partner hit with data breach, customers warned of scam emails
1 Jun 2026
Critical1 Jun 2026
Thailand Digital Ministry
Government · Records not stated
221 million login records exposed, prompting MFA mandate for state systems
1 Jun 2026
High1 Jun 2026
Law firm (New Jersey)
Legal · 13,000 records
Data from 13,000 patients exposed via cyberattack on law firm representing hospitals
1 Jun 2026
Critical1 Jun 2026
Elasticsearch Database (Infostealer logs)
Technology · Records not stated
Publicly exposed database leaked 24 billion stolen credentials in June 2026, largest infostealer compilation
1 Jun 2026
Critical1 Jun 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26M patient records exposed in PEAR ransomware attack; medical billing data compromised
1 Jun 2026
Critical1 Jun 2026
MCBS Medical Billing
Healthcare · 1,260,000 records
1.26 million patients exposed in PEAR ransomware attack on medical billing company
1 Jun 2026
Critical1 Jun 2026
Instructure
Education · Records not stated
Canvas platform supply chain breach generating over 50% of all breach notices in 2026
1 Jun 2026
High1 Jun 2026
Law Firm (New Jersey)
Legal · 13,000 records
Cyberattack on law firm exposed hospital records of nearly 13,000 patients
1 Jun 2026
High1 Jun 2026
Thousands of NHS patient records
Healthcare · 900,000 records
Thousands of NHS patient records confirmed stolen in major ransomware attack disrupting healthcare services
1 Jun 2026
Critical1 Jun 2026
Elasticsearch (public database)
Sector not stated · Records not stated
24 billion stolen credentials leaked in publicly exposed database, largest infostealer log compilation
1 Jun 2026
High1 Jun 2026
SISVISA
Healthcare · Records not stated
102,215 Brazilian health surveillance records leaked including IDs and tax data
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Personal and medical information including SSNs exposed in data breach
1 Jun 2026
Were you affected?