Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,314
Disclosures in the tracker, all years
2,028
Of those, indexed in 2026
76
Added in October
21
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 21 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

73 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United Kingdom16 Oct 2026Southville Primary School (Bristol City Council area)The source does not say how they got in.Hits Radio (West of England)
  2. United Kingdom13 Oct 2026TFG LondonThe source does not say how they got in.BleepingComputer
High31 Jul 2026
EY (via vendor)
Finance · Records not stated
Third-party vendor breach exposed tax client data after 15-day intrusion
31 Jul 2026
Critical31 Jul 2026
Ransomware attack
Healthcare · 1,200,000 records
Ransomware attack exposed personal data of 1.2 million individuals
31 Jul 2026
High31 Jul 2026
Ransomware attack
Education · Records not stated
Ransomware attack exposed sensitive data including driver's license numbers from Multiethnic Cohort Study
31 Jul 2026
Critical31 Jul 2026
Unnamed Medical Billing Company
Healthcare · 1,300,000 records
Ransomware attack exposed protected health data on 1.3 million people to dark web
31 Jul 2026
Critical31 Jul 2026
Suno (AI music platform)
Technology · 55,000,000 records
Data breach exposed 55 million user accounts, confirmed by monitored breach databases
31 Jul 2026
High31 Jul 2026
Fairlife
Retail · Records not stated
Ransomware attack resulted in data breach confirmed by parent company Coca-Cola
31 Jul 2026
Critical31 Jul 2026
Intesa Sanpaolo S.p.A.
Finance · Records not stated
Employee unlawfully accessed customer data over 2+ years; €31.8m fine for breach transparency/risk issues
31 Jul 2026
High31 Jul 2026
KT Corp
Technology · Records not stated
Major data breach with significant fine from South Korea's Personal Information Protection Commission
31 Jul 2026
High31 Jul 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen in major ransomware attack disrupting healthcare services
31 Jul 2026
High31 Jul 2026
PowerSchool Holdings
Education · Records not stated
Student and teacher data breached at education software provider
31 Jul 2026
High31 Jul 2026
TransUnion
Finance · Records not stated
Among the seven largest banking data breaches of 2025
31 Jul 2026
High31 Jul 2026
700Credit
Finance · Records not stated
Among the seven largest banking data breaches of 2025
31 Jul 2026
High31 Jul 2026
Prosper Marketplace
Finance · Records not stated
Among the seven largest banking data breaches of 2025
31 Jul 2026
High31 Jul 2026
KT Corp
Technology · Records not stated
Data breach resulting in substantial fine from South Korea's Personal Information Protection Commission
31 Jul 2026
High31 Jul 2026
FinWise Bank
Finance · 689,000 records
Data breach affecting 689,000 users with unencrypted personal data accessed
31 Jul 2026
High31 Jul 2026
Unnamed Law Firm
Legal · 13,000 records
Hospital patient records for 13,000 patients in New Jersey exposed via cyberattack
31 Jul 2026
Critical31 Jul 2026
U.S. Civil Service/White House
Government · Records not stated
Thousands of civil servants' passwords exposed since early 2024, including some linked to White House
31 Jul 2026
Critical31 Jul 2026
Gaming accounts (multiple)
Technology · Records not stated
11 million gaming account credentials exposed in 2024 data leaks discovered by Kaspersky
31 Jul 2026
Critical31 Jul 2026
Gaming accounts (Kaspersky research)
Technology · Records not stated
Over 11 million gaming account credentials exposed and found on dark web
31 Jul 2026
High31 Jul 2026
Synnovis NHS
Healthcare · 900,000 records
Thousands of patient records stolen in major ransomware cyberattack affecting NHS trust in Essex
31 Jul 2026
Critical31 Jul 2026
Medical billing company
Healthcare · 1,300,000 records
Ransomware attack exposed protected health data on 1.3 million people; data leaked to dark web
31 Jul 2026
Critical31 Jul 2026
ANTS
Government · 19,000,000 records
Cyberattack on France's identity agency exposed 19 million records with personal data linked to ID documents
31 Jul 2026
High31 Jul 2026
Cherry Creek School District
Education · Records not stated
Data breach exposed student information, lawsuit filed
31 Jul 2026
High31 Jul 2026
Data security incident
Retail · Records not stated
Data security incident exposed personal information, $40M settlement reached
31 Jul 2026
Were you affected?