Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,306
Disclosures in the tracker, all years
2,020
Of those, indexed in 2026
68
Added in October
18
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 20 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

65 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Hong Kong16 Oct 2026AOMEI Backupper usersHow they got in: a supplier or vendor that was compromised first.The Hacker News
High13 Aug 2026
River Bank
Finance · Records not stated
Ransomware attack with data deletion confirmation received from ransomware gang
13 Aug 2026
High13 Aug 2026
Clover Health
Healthcare · Records not stated
Data breach disclosed in securities filing; type and extent of exposed data not yet determined
13 Aug 2026
High13 Aug 2026
WellPoint Texas
Healthcare · Records not stated
Data breach exposed personal information; class action investigation launched
13 Aug 2026
Critical13 Aug 2026
Connor Moucka Snowflake Campaign
Technology · 165,000,000 records
165+ orgs breached, billions of records stolen
13 Aug 2026
High13 Aug 2026
100K+ officers' contact data exposed
Government · Records not stated
100K+ officers' contact data exposed
13 Aug 2026
Critical13 Aug 2026
Snowflake Customer Environments
Technology · 165,000,000 records
165+ orgs breached, billions of records stolen
13 Aug 2026
Critical13 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
China-linked malware found on USB drives used on classified networks, breach unnoticed for nearly a year
13 Aug 2026
Critical13 Aug 2026
100K+ police officer contacts leaked by ExfilSquad
Government · Records not stated
100K+ police officer contacts leaked by ExfilSquad
13 Aug 2026
High13 Aug 2026
Trezor
Technology · Records not stated
Customer records of 13,689 buyers exposed in sophisticated phishing attack
13 Aug 2026
Critical13 Aug 2026
100K+ police officers PII exfiltrated
Government · Records not stated
100K+ police officers PII exfiltrated
13 Aug 2026
High13 Aug 2026
100K+ officer contact records exposed
Government · Records not stated
100K+ officer contact records exposed
13 Aug 2026
Critical13 Aug 2026
Polish Patient Records Platform
Healthcare · Records not stated
19M medical records stolen in cyberattack
13 Aug 2026
Critical13 Aug 2026
US Government Civil Service
Government · Records not stated
Thousands of civil servants' passwords and White House-linked passwords exposed since early 2024
13 Aug 2026
High13 Aug 2026
River Financial Corporation
Finance · Records not stated
River Bank & Trust ransomware attack; hackers confirmed deletion of stolen data
13 Aug 2026
Critical13 Aug 2026
Multiple Organizations (Infostealer Malware)
Sector not stated · 24,000,000,000 records
24 billion records including usernames, passwords, and URLs exposed from infostealer malware campaign
13 Aug 2026
Critical13 Aug 2026
Blue Cross-Blue Shield
Healthcare · Records not stated
Massive data breach; company allegedly knew about breach and delayed reporting
13 Aug 2026
Critical13 Aug 2026
Cerner (Huntsville Hospital)
Healthcare · Records not stated
Patient data compromised in 2025 breach affecting Huntsville Hospital Health System
13 Aug 2026
Critical13 Aug 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of patient records stolen in ransomware attack affecting NHS trust
13 Aug 2026
Critical13 Aug 2026
Credential Aggregation Dump
Sector not stated · Records not stated
24B stolen credentials exposed in open database
13 Aug 2026
Critical13 Aug 2026
Poland National Patient Records
Healthcare · Records not stated
19M medical records stolen in cyberattack
13 Aug 2026
High13 Aug 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
2025 Cerner breach resulted in stolen patient data; hospital faces class action lawsuit for negligence
13 Aug 2026
Critical13 Aug 2026
24B Credential Elasticsearch Dump
Sector not stated · 24,000,000,000 records
24B credential records publicly exposed online
13 Aug 2026
Critical13 Aug 2026
MyDr Poland Medical Records
Healthcare · 19,000,000 records
19M patient records stolen from 12K clinics
13 Aug 2026
Critical13 Aug 2026
Conduent Business Services
Sector not stated · 10,500,000 records
Data breach impacted over 10.5 million individuals with customer personal information exposed in 2024 incident
13 Aug 2026
Were you affected?