Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,310
Disclosures in the tracker, all years
2,025
Of those, indexed in 2026
76
Added in October
22
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 20 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

73 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United Kingdom16 Oct 2026Southville Primary School (Bristol City Council area)The source does not say how they got in.Hits Radio (West of England)
  2. United Kingdom13 Oct 2026TFG LondonThe source does not say how they got in.BleepingComputer
Medium1 Aug 2026
FirstClass
Sector not stated · Records not stated
Australian travel agency customer records compromised in alleged data breach
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Healthcare · 1,200,000 records
The disclosure as indexed does not name the organisation.
2025 ransomware attack exposed personal data of 1.2 million individuals
1 Aug 2026
Critical1 Aug 2026
Marquis
Finance · 672,000 records
Ransomware attack stealing 672K records including names, addresses, card numbers from fintech firm
1 Aug 2026
High1 Aug 2026
Law firm (New Jersey)
Healthcare · Records not stated
13K hospital patient records exposed in cyberattack
1 Aug 2026
High1 Aug 2026
Essex NHS Trust
Healthcare · 900,000 records
Thousands of patient records stolen in cyber attack, disclosed 6+ months after notification
1 Aug 2026
Critical1 Aug 2026
Otelier
Retail · Records not stated
Data on 500,000+ hotel guests exposed including customers from Marriott, Hilton, Hyatt brands
1 Aug 2026
High1 Aug 2026
New Jersey Law Firm
Legal · 13,000 records
Cyberattack exposed hospital records for nearly 13,000 patients in New Jersey
1 Aug 2026
High1 Aug 2026
SplitVPN
Finance · 865,336 records
865,336 records exposed, Device information, Email addresses, Geographic locations, IP addresses and 1 more
1 Aug 2026
High1 Aug 2026
South Korea Diplomatic Academy
Government · Records not stated
6000 diplomat and MFA employee records stolen
1 Aug 2026
Critical1 Aug 2026
Origin Energy Australia
Sector not stated · 900,000 records
900K customer records accessed by hacker
1 Aug 2026
Critical1 Aug 2026
Suno AI Music Platform
Technology · 55,300,000 records
55.3M accounts exposed with payment data
1 Aug 2026
Critical1 Aug 2026
KDDI
Technology · 12,000,000 records
12M email accounts and 7.6M passwords exposed
1 Aug 2026
Critical1 Aug 2026
US DHS Info Network
Government · Records not stated
Federal security network breached pre-FIFA World Cup
1 Aug 2026
Critical1 Aug 2026
Ernst Young
Finance · Records not stated
SSNs and tax records stolen from helpdesk platform
1 Aug 2026
Critical1 Aug 2026
Abbott Exact Sciences
Healthcare · 30,000,000 records
30M patient records stolen via vishing attack
1 Aug 2026
High1 Aug 2026
Unlimited Technology Systems
Healthcare · 442,000 records
442K patient records exposed in ransomware attack
1 Aug 2026
Critical1 Aug 2026
Abbott / Exact Sciences
Healthcare · 30,000,000 records
30M rows stolen, 1M SSNs exposed
1 Aug 2026
Critical1 Aug 2026
Coca-Cola Fairlife
Sector not stated · Records not stated
1TB data stolen in ransomware attack
1 Aug 2026
High1 Aug 2026
Klue
Technology · Records not stated
200 firms hit via stolen OAuth credentials
1 Aug 2026
Critical1 Aug 2026
Cardiovascular Institute New England
Healthcare · Records not stated
Full medical and financial records confirmed exposed
1 Aug 2026
Critical1 Aug 2026
Nissan Motor
Sector not stated · 53,000 records
SSNs and banking data stolen from US and Canada employees
1 Aug 2026
Critical1 Aug 2026
AssuranceAmerica Insurance
Finance · Records not stated
6.9M driver license numbers stolen
1 Aug 2026
Critical1 Aug 2026
Craneware Healthcare Billing
Healthcare · Records not stated
Patient and customer data stolen from 12K US facilities
1 Aug 2026
High1 Aug 2026
Klue
Technology · Records not stated
200 firms breached via stale Salesforce credential
1 Aug 2026
Were you affected?