Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,306
Disclosures in the tracker, all years
2,020
Of those, indexed in 2026
69
Added in October
19
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 20 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

68 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United Kingdom16 Oct 2026Southville Primary School (Bristol City Council area)The source does not say how they got in.Hits Radio (West of England)
  2. United Kingdom13 Oct 2026TFG LondonThe source does not say how they got in.BleepingComputer
High1 Aug 2026
Uber Freight
Technology · Records not stated
Hacking group claims data breach; company investigating cyberattack on logistics division
1 Aug 2026
High1 Aug 2026
Beacon CRM
Sector not stated · Records not stated
Data breach affecting over 1,000 UK charities; root cause revealed
1 Aug 2026
Critical1 Aug 2026
Ceva Logistics
Sector not stated · Records not stated
Data breach exposed personal data affecting banks, retailers, and Steam gamers relying on shipping services
1 Aug 2026
Critical1 Aug 2026
Snowflake
Technology · 165,000,000 records
Credential-based cloud intrusion exposed over 100 million records (2024-2026 period)
1 Aug 2026
Critical1 Aug 2026
LiteLLM
Technology · Records not stated
AI supply chain breach exposed 2,500+ organizations and 434,000 CI/CD pipelines with credentials exposure
1 Aug 2026
High1 Aug 2026
Breach at CEVA Logistics
Technology · Records not stated
Breach at CEVA Logistics exposed names, addresses, and order data of European Steam hardware buyers
1 Aug 2026
High1 Aug 2026
Valve
Technology · Records not stated
European logistics partner data breach exposed customer information
1 Aug 2026
High1 Aug 2026
Levi Strauss
Retail · Records not stated
Corporate data stolen through social engineering targeting three employees
1 Aug 2026
Critical1 Aug 2026
Origin Energy
Sector not stated · 2,000,000 records
Hacker claims to have stolen information of 2 million customers
1 Aug 2026
High1 Aug 2026
Bank of Baroda
Finance · Records not stated
Compromised employee email account allowed unauthorized access to certain data
1 Aug 2026
High1 Aug 2026
Police National Legal Database
Government · Records not stated
135,000 contact records stolen and leaked on dark web by ExfilSquad
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
221 million login records exposed; Digital Ministry seeking MFA mandate on key state systems
1 Aug 2026
Critical1 Aug 2026
France DGFiP
Government · 678,000 records
Tax authority breach exposed records of 678,000 people and businesses with tax, business and property information
1 Aug 2026
Medium1 Aug 2026
Trezor
Technology · Records not stated
Third-party fulfillment partner breach exposed shipping addresses of 14,000 hardware wallet buyers
1 Aug 2026
High1 Aug 2026
Uber Freight
Technology · Records not stated
Hacking group claimed data breach at ridesharing giant's logistics division; investigation underway
1 Aug 2026
High1 Aug 2026
Valve (CEVA Logistics partner)
Technology · Records not stated
Steam hardware shipping partner CEVA Logistics breached, exposing European customer names, addresses, order data
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Clop hacking group claimed theft of data from nearly 50 multinational firms via vulnerability exploitation
1 Aug 2026
High1 Aug 2026
Levi Strauss
Retail · Records not stated
Hackers used social engineering to access employee computers and steal corporate data
1 Aug 2026
High1 Aug 2026
Bank of Baroda
Finance · Records not stated
Cyber incident from compromised employee email account allowing unauthorized data access
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records stolen and leaked on dark web by ExfilSquad
1 Aug 2026
Critical1 Aug 2026
Thailand Digital Ministry
Government · Records not stated
221 million login records exposed, MFA mandate sought for state systems
1 Aug 2026
High1 Aug 2026
DGFiP (France)
Government · 678,000 records
678,000 records exposed including tax, business and property information
1 Aug 2026
Medium1 Aug 2026
Trezor
Technology · Records not stated
Third-party fulfillment partner breach exposed shipping addresses of 14,000 hardware wallet buyers in 7 countries
1 Aug 2026
High1 Aug 2026
Uber Freight
Technology · Records not stated
Hacking group claimed responsibility for data breach at Uber Freight logistics division
1 Aug 2026
Were you affected?