Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,447
Disclosures in the tracker, all years
2,033
Of those, indexed in 2026
86
Added in October
20
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 22 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

72 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United Kingdom16 Oct 2026Southville Primary School (Bristol City Council area)The source does not say how they got in.Hits Radio (West of England)
  2. United Kingdom13 Oct 2026TFG LondonThe source does not say how they got in.BleepingComputer
High1 Jun 2026
T-Mobile
Technology · Records not stated
Data breach exposed customer information; company violated WA notification law with text message notices
1 Jun 2026
Critical1 Jun 2026
Exact Sciences / Abbott
Healthcare · Records not stated
Patient data exposed through at-home diagnostic tests; sensitive and confidential personal information compromised
1 Jun 2026
High1 Jun 2026
Law firm representing hospitals
Legal · 13,000 records
Cyberattack exposed hospital records of nearly 13,000 patients in New Jersey
1 Jun 2026
High1 Jun 2026
Tribeca Festival
Sector not stated · Records not stated
Hundreds of thousands of records and celebrity contact information exposed in data leak
1 Jun 2026
High1 Jun 2026
Allstate
Finance · Records not stated
Employee-related records exposed in data breach
1 Jun 2026
Critical1 Jun 2026
Synnovis/NHS Essex
Healthcare · 900,000 records
Thousands of NHS patient records stolen in ransomware attack affecting Essex NHS trust
1 Jun 2026
High1 Jun 2026
Suno
Technology · Records not stated
Customer records and AI model training data exposed; customers not notified
1 Jun 2026
High1 Jun 2026
Canvas (Learning Management Platform)
Education · Records not stated
Learning platform attacked by ShinyHunters hacker group, security breach disclosed
1 Jun 2026
High1 Jun 2026
Coca-Cola Fairlife
Retail · Records not stated
Ransomware attack shut down $4 billion dairy brand operations
1 Jun 2026
High1 Jun 2026
FirstClass (travel agency)
Sector not stated · Records not stated
Customer records breached by threat actor operating on underground hacking forums
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Ransomware attack stole thousands of NHS patient records from Mid South Essex Foundation Trust
1 Jun 2026
High1 Jun 2026
FirstClass (Australian Travel Agency)
Sector not stated · Records not stated
Customer records allegedly breached by threat actor operating on underground hacking forums
1 Jun 2026
Critical1 Jun 2026
Elasticsearch Database (Infostealer Logs)
Technology · Records not stated
Publicly exposed database leaked 24 billion stolen credentials, one of largest infostealer compilations
1 Jun 2026
High1 Jun 2026
TrueConf
Technology · Records not stated
Server breach exploited by Head Mare group to trojanize client installers with backdoors
1 Jun 2026
Critical1 Jun 2026
Essex NHS Trust (Synnovis)
Healthcare · 900,000 records
Thousands of patient records stolen in ransomware cyberattack on NHS trust in Essex
1 Jun 2026
Critical1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen in ransomware attack affecting Essex NHS trust
1 Jun 2026
Critical1 Jun 2026
Elasticsearch (Infostealer Database)
Technology · Records not stated
Publicly exposed Elasticsearch database leaked 24 billion stolen credentials from infostealer logs
1 Jun 2026
High1 Jun 2026
Synnovis NHS Trust
Healthcare · 900,000 records
Ransomware attack stole thousands of NHS patient records from Essex healthcare trust
1 Jun 2026
High1 Jun 2026
Coca-Cola fairlife
Retail · Records not stated
Ransomware attack shut down dairy operations
1 Jun 2026
High1 Jun 2026
Thousands of NHS patient records
Healthcare · 900,000 records
Thousands of NHS patient records confirmed stolen during ransomware attack disrupting healthcare services
1 Jun 2026
Critical1 Jun 2026
Thousands of patient records stolen in ransomware cyberattack
Healthcare · Records not stated
Thousands of patient records stolen in ransomware cyberattack
1 Jun 2026
High1 Jun 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records and police/government data leaked on dark web
1 Jun 2026
Critical1 Jun 2026
Synnovis (NHS)
Healthcare · 900,000 records
Thousands of NHS patient records stolen in major ransomware attack affecting healthcare services
1 Jun 2026
Critical1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records confirmed stolen in ransomware attack
1 Jun 2026
Were you affected?