Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,305
Disclosures in the tracker, all years
2,019
Of those, indexed in 2026
67
Added in October
19
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 19 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

65 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United Kingdom16 Oct 2026Southville Primary School (Bristol City Council area)The source does not say how they got in.Hits Radio (West of England)
  2. United Kingdom13 Oct 2026TFG LondonThe source does not say how they got in.BleepingComputer
Critical8 Aug 2026
135K officer and government contacts on dark web
Government · Records not stated
135K officer and government contacts on dark web
8 Aug 2026
Critical8 Aug 2026
Conduent Health Services
Healthcare · 62,000,000 records
62M records stolen via 3-month network intrusion
8 Aug 2026
Critical8 Aug 2026
Basic-Fit Gym Group
Sector not stated · Records not stated
1M members bank and personal data breached
8 Aug 2026
Critical8 Aug 2026
Elasticsearch Credential Database
Technology · Records not stated
24B stolen credential records publicly exposed
8 Aug 2026
Critical8 Aug 2026
135K police and government contact records leaked
Government · Records not stated
135K police and government contact records leaked
8 Aug 2026
Critical8 Aug 2026
Carnival Corporation
Retail · Records not stated
6M loyalty accounts stolen by ShinyHunters
8 Aug 2026
Critical8 Aug 2026
Navia Benefits Solutions
Finance · 2,700,000 records
SSNs and benefits data stolen from 2.7M people
8 Aug 2026
Critical8 Aug 2026
Police and justice staff PII exposed
Government · Records not stated
Police and justice staff PII exposed
8 Aug 2026
Medium8 Aug 2026
Canada Computers
Retail · 1,284 records
Payment card data stolen from 1,284 accounts
8 Aug 2026
Critical8 Aug 2026
135K law enforcement contacts leaked on dark web
Government · Records not stated
135K law enforcement contacts leaked on dark web
8 Aug 2026
Critical8 Aug 2026
Police officer names and emails
Government · Records not stated
Police officer names and emails exposed
8 Aug 2026
High8 Aug 2026
UK Dept for Education
Education · Records not stated
600K parent and staff contacts exfiltrated
8 Aug 2026
Critical8 Aug 2026
Snowflake via Connor Moucka
Technology · 165,000,000 records
Billions of records across 165 organizations stolen
8 Aug 2026
High8 Aug 2026
Pathstone Private Office
Finance · Records not stated
641K sensitive financial records stolen
8 Aug 2026
High8 Aug 2026
135K law enforcement contacts leaked dark web
Government · Records not stated
135K law enforcement contacts leaked dark web
8 Aug 2026
Critical8 Aug 2026
Amgen Pharmaceuticals
Healthcare · Records not stated
Patient and corporate data stolen from cloud systems
8 Aug 2026
Critical8 Aug 2026
100K+ officer and justice staff records leaked
Government · Records not stated
100K+ officer and justice staff records leaked
8 Aug 2026
High7 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
A recent wave of cyber attacks targeting financial services, private equity, and professional services has been attributed to a data extortion group known as UNC6671. "UNC6671 continues to rely on voice phishing…
7 Aug 2026
Critical7 Aug 2026
City of Coweta
Government · Records not stated
KTUL in Oklahoma reports: The City of Coweta says they are currently responding to a ransomware attack. According to officials, on Werdnesday, August 5, the City experienced at system-wide attack and immediately…
7 Aug 2026
High7 Aug 2026
Levi Strauss & Co.
Retail · Records not stated
Hackers used social engineering to steal corporate data from three employees
7 Aug 2026
High7 Aug 2026
Swiss Federal Government (BIT/FOITT)
Government · Records not stated
Hackers exploited Microsoft SharePoint vulnerabilities to breach servers and compromise 200 accounts
7 Aug 2026
High7 Aug 2026
Coinbase
Finance · Records not stated
Breach involving outsourcer fired HR employees investigating data theft; suspect retained data for 10,000+ customers
7 Aug 2026
Critical7 Aug 2026
Gaming Accounts (Multi-org)
Technology · Records not stated
11+ million gaming account credentials exposed through credential theft and infostealer malware
7 Aug 2026
High7 Aug 2026
Officer PII and justice partner emails
Government · Records not stated
Officer PII and justice partner emails exposed
7 Aug 2026
Were you affected?