Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,518
Disclosures in the tracker, all years
2,024
Of those, indexed in 2026
75
Added in October
21
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 20 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

69 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Hong Kong16 Oct 2026AOMEI Backupper usersHow they got in: a supplier or vendor that was compromised first.The Hacker News
Critical9 Aug 2026
Conduent Business Services
Healthcare · 62,200,000 records
62.2M records exposed in healthcare breach
9 Aug 2026
Medium9 Aug 2026
Alcon
Healthcare · 218,395 records
218,395 records exposed, Email addresses, Names, Phone numbers, Physical addresses
9 Aug 2026
High9 Aug 2026
Breach
Healthcare · Records not stated
Breach exposed personal and medical information including Social Security numbers
9 Aug 2026
Critical9 Aug 2026
Basic-Fit
Sector not stated · Records not stated
1M members bank and personal data breached
9 Aug 2026
Critical9 Aug 2026
100K+ officer and staff records exposed
Government · Records not stated
100K+ officer and staff records exposed
9 Aug 2026
Critical9 Aug 2026
Marquis Fintech
Finance · Records not stated
800K personal and financial records compromised
9 Aug 2026
Critical9 Aug 2026
US Homeland Security Network
Government · Records not stated
Sensitive gov agency data accessed via HSIN platform
9 Aug 2026
Critical9 Aug 2026
135K law enforcement contact records leaked
Government · Records not stated
135K law enforcement contact records leaked
9 Aug 2026
High9 Aug 2026
Switzerland Federal IT Office
Government · Records not stated
200 government accounts compromised via SharePoint
9 Aug 2026
Critical9 Aug 2026
Snowflake Cloud Platform
Technology · 165,000,000 records
165+ orgs breached, billions of records stolen
9 Aug 2026
Critical9 Aug 2026
100K+ officers and staff contact data exposed
Government · Records not stated
100K+ officers and staff contact data exposed
9 Aug 2026
Medium9 Aug 2026
Swiss Federal IT Office
Government · Records not stated
200 government accounts compromised via SharePoint
9 Aug 2026
Critical9 Aug 2026
One Medical Seniors
Healthcare · Records not stated
Clinical records exfiltrated in third-party breach
9 Aug 2026
Critical9 Aug 2026
100K+ officer and justice professional records leaked
Government · Records not stated
100K+ officer and justice professional records leaked
9 Aug 2026
Medium9 Aug 2026
Liechtenstein Government Register
Government · Records not stated
31K beneficial ownership records exposed
9 Aug 2026
Critical9 Aug 2026
Snowflake Platform
Technology · 165,000,000 records
165 orgs breached billions of records stolen
9 Aug 2026
Critical9 Aug 2026
100K+ officer and staff records leaked
Government · Records not stated
100K+ officer and staff records leaked
9 Aug 2026
High9 Aug 2026
Harrods
Retail · 430,000 records
430K customer records stolen by third party
9 Aug 2026
Critical9 Aug 2026
100K+ officers and staff credentials exposed
Government · Records not stated
100K+ officers and staff credentials exposed
9 Aug 2026
Medium8 Aug 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
A cluster of nearly 800 malicious packages has been published to the npm registry as part of a new campaign designed to deliver cross-platform malware targeting Windows, Mac, and Linux systems. "These packages appear…
8 Aug 2026
Critical8 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
An update on the ransomware attack affecting the City of Coweta: the city manager has been through a ransomware attack before with another city, and reports that after they paid, they were reinfected weeks later, so…
8 Aug 2026
Medium8 Aug 2026
Katie Chavez
Government · Records not stated
Katie Chavez reports: Suisun City officials declared a state of emergency Saturday, Aug. 8, after a cyberattack took out the city’s emergency dispatch line and other key systems. City officials said that “malicious…
8 Aug 2026
Critical8 Aug 2026
U.S. Government (Civil Servants)
Government · Records not stated
Thousands of civil servants' passwords exposed since early 2024, including White House-linked credentials
8 Aug 2026
High8 Aug 2026
Intel
Technology · 18,000 records
18,000 files stolen in insider threat incident
8 Aug 2026
Were you affected?