Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,301
Disclosures in the tracker, all years
2,015
Of those, indexed in 2026
62
Added in October
18
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 19 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

65 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United Kingdom16 Oct 2026Southville Primary School (Bristol City Council area)The source does not say how they got in.Hits Radio (West of England)
  2. United Kingdom13 Oct 2026TFG LondonThe source does not say how they got in.BleepingComputer
High10 Aug 2026
US Government civil services
Government · Records not stated
Thousands of civil servants' passwords exposed including White House linked credentials since early 2024
10 Aug 2026
Critical10 Aug 2026
100K+ officers and staff contacts exposed
Government · Records not stated
100K+ officers and staff contacts exposed
10 Aug 2026
Critical10 Aug 2026
CareCloud Health
Healthcare · 350,000 records
350K patients: SSNs, financials, medical records stolen
10 Aug 2026
Critical10 Aug 2026
UK Dept for Education
Education · 500,000 records
500K records stolen by ExfilSquad
10 Aug 2026
Critical10 Aug 2026
VITAS Hospice Services
Healthcare · 300,000 records
300K patient records with SSNs and medical data
10 Aug 2026
High10 Aug 2026
Morguard Real Estate
Finance · Records not stated
Data theft threat after failed ransom negotiations
10 Aug 2026
Critical10 Aug 2026
UK Police Legal Database
Government · Records not stated
135K law enforcement contact records leaked
10 Aug 2026
Critical10 Aug 2026
Blue Cross Blue Shield
Healthcare · Records not stated
Massive data breach; company allegedly knew about breach and delayed reporting; Montana insurance investigation
10 Aug 2026
High10 Aug 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Healthcare advocacy vendor cybersecurity incident exposed employees' social security numbers
10 Aug 2026
Critical10 Aug 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patients exposed in PEAR ransomware attack; healthcare billing and practice-management data
10 Aug 2026
High10 Aug 2026
Valve
Technology · Records not stated
Steam hardware customer data stolen; European customers notified
10 Aug 2026
High10 Aug 2026
Suno
Technology · Records not stated
Customer records exposed revealing AI music training methods; notification delays reported
10 Aug 2026
Medium10 Aug 2026
Levi Strauss
Retail · Records not stated
Hackers accessed three employee company-issued computers via social engineering
10 Aug 2026
Critical10 Aug 2026
AnMed Health System
Healthcare · Records not stated
US nonprofit health system data exfiltrated
10 Aug 2026
High10 Aug 2026
Newcastle University
Education · Records not stated
440K admissions records exfiltrated by ExfilSquad
10 Aug 2026
Critical10 Aug 2026
100K+ officer and staff records exposed
Government · Records not stated
100K+ officer and staff records exposed
10 Aug 2026
Critical10 Aug 2026
Snowflake Cloud Hacking Conspiracy
Technology · 165,000,000 records
Billions of records stolen across 165 organizations
10 Aug 2026
Critical10 Aug 2026
Blue Cross-Blue Shield
Finance · Records not stated
Massive data breach; company allegedly knew about it but delayed reporting to regulators
10 Aug 2026
Medium10 Aug 2026
Canopy Support Services
Sector not stated · Records not stated
Canadian nonprofit breached by TheGentlemen
10 Aug 2026
High10 Aug 2026
Newcastle University
Education · Records not stated
440K admissions records stolen by ExfilSquad
10 Aug 2026
Critical10 Aug 2026
UK Police National Database
Government · Records not stated
100K+ officer and staff contact records exposed
10 Aug 2026
Critical10 Aug 2026
AnMed Health System
Healthcare · Records not stated
Ongoing malware attack closes 83 facilities
10 Aug 2026
High10 Aug 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen in major ransomware attack
10 Aug 2026
Critical10 Aug 2026
Canadian Tire
Retail · 42,000,000 records
42 million records exposed in 2025 data breach
10 Aug 2026
Were you affected?