Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,328
Disclosures in the tracker, all years
2,042
Of those, indexed in 2026
95
Added in October
24
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 22 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

72 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United Kingdom16 Oct 2026Southville Primary School (Bristol City Council area)The source does not say how they got in.Hits Radio (West of England)
Critical1 Apr 2026
Intesa Sanpaolo S.p.A.
Finance · Records not stated
Employee unlawfully accessed customer data over two years; insider threat breach
1 Apr 2026
High1 Apr 2026
Nissan
Sector not stated · Records not stated
Data breach involving information held by third-party vendor; hacking group claimed breach
1 Apr 2026
High1 Apr 2026
Ryanair
Sector not stated · Records not stated
Breach claimed on hacker forums, exposing legal emails, flight data, and banking details
1 Apr 2026
Critical1 Apr 2026
CISA (US Agency)
Government · Records not stated
Breached through Cisco vulnerability, FIRESTARTER backdoor allowed access through March
1 Apr 2026
Critical1 Apr 2026
ANTS
Government · Records not stated
Major cyberattack on France's identity agency exposed 19 million personal records
1 Apr 2026
High1 Apr 2026
Vercel
Technology · Records not stated
OAuth supply chain compromise exposed trusted third-party apps and platform environment variables
1 Apr 2026
High1 Apr 2026
Sandhills Medical Foundation
Healthcare · 170,000 records
170,000 individuals affected in ransomware breach of South Carolina healthcare provider
1 Apr 2026
Critical1 Apr 2026
ANTS (French ID Agency)
Government · 19,000,000 records
Cyberattack exposed 19 million records containing personal data linked to national identity
1 Apr 2026
High1 Apr 2026
ADT
Sector not stated · 30,814 records
Cybercriminals breached systems and stole limited set of customer and prospective customer data
1 Apr 2026
Critical1 Apr 2026
Intesa Sanpaolo S.p.A.
Finance · Records not stated
Employee unlawfully accessed customer data over two years; €31.8m fine for breach transparency failure
1 Apr 2026
High1 Apr 2026
Ryanair
Sector not stated · Records not stated
Breach exposed legal emails, flight data, and banking details; data claimed on hacker forums
1 Apr 2026
Critical1 Apr 2026
ANTS (French ID Agency)
Government · Records not stated
Cyberattack exposed 19 million personal identity records including government data
1 Apr 2026
High1 Apr 2026
Bank of Baroda (BoB)
Finance · Records not stated
Alleged data breach involving sensitive banking and corporate information
1 Apr 2026
High1 Apr 2026
Nissan
Retail · Records not stated
Data breach via compromise of third-party vendor file-transfer system
1 Apr 2026
High1 Apr 2026
Bank of Baroda
Finance · Records not stated
Alleged data breach affecting customer data
1 Apr 2026
Critical1 Apr 2026
US Government Agency (unnamed)
Government · Records not stated
CISA agency breached through Cisco vulnerability; FIRESTARTER backdoor allowed persistent access through March 2026
1 Apr 2026
High1 Apr 2026
CISA (U.S. Federal Agency)
Government · Records not stated
Unnamed U.S. department breached through Cisco vulnerability; FIRESTARTER backdoor allowed access through March 2026
1 Apr 2026
Critical1 Apr 2026
Puerto Rico Government Agency
Government · Records not stated
Mapping service exposed 1 million Social Security numbers
1 Apr 2026
High1 Apr 2026
CISA/US Federal Agency
Government · Records not stated
US federal department breached through Cisco vulnerability allowing FIRESTARTER backdoor malware access through March 2026
1 Apr 2026
Critical1 Apr 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Major cyberattack exposing 19 million French citizen identity records
1 Apr 2026
Critical1 Apr 2026
UK BioBank / Alibaba
Healthcare · Records not stated
500,000 Britons' private health records offered for sale on Chinese website; de-identified data advertised
1 Apr 2026
Critical1 Apr 2026
ANTS (French National Agency)
Government · 19,000,000 records
Cyberattack exposed 19 million records from France's identity agency with personal data linked to ID systems
1 Apr 2026
Critical1 Apr 2026
ShinyHunters (multiple brands)
Retail · 9,000,000 records
Hacking group claimed compromise of 9 major brands including Zara, affecting 9M+ records
1 Apr 2026
Critical1 Apr 2026
CISA/US Government
Government · Records not stated
US agency breached via Cisco vulnerability with FIRESTARTER backdoor malware allowing persistent access
1 Apr 2026
Were you affected?