Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,314
Disclosures in the tracker, all years
2,028
Of those, indexed in 2026
76
Added in October
21
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 21 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

73 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Hong Kong16 Oct 2026AOMEI Backupper usersHow they got in: a supplier or vendor that was compromised first.The Hacker News
Medium1 Aug 2026
Cyberattack
Technology · Records not stated
Cyberattack exposed customer names, addresses, and order data for Valve Steam customers
1 Aug 2026
High1 Aug 2026
Paylogix, LLC
Technology · Records not stated
Personal information breach; class action lawsuit investigation launched
1 Aug 2026
Critical1 Aug 2026
French Tax Authority
Government · Records not stated
Personal and tax information of over 670,000 French taxpayers stolen and offered online
1 Aug 2026
High1 Aug 2026
Shell, Philips, GE, Fiserv
Sector not stated · Records not stated
Hacking group claimed mass data theft from multiple companies exploiting software vulnerabilities
1 Aug 2026
Medium1 Aug 2026
SickKids
Healthcare · Records not stated
Personal information of current and former employees accessed in data breach
1 Aug 2026
Critical1 Aug 2026
CareCloud
Healthcare · 3,700,000 records
Medical records of 3.7 million patients stolen in cyberattack, one of largest US healthcare breaches this year
1 Aug 2026
Critical1 Aug 2026
LiteLLM
Technology · Records not stated
Supply chain attack exposed 2,500+ companies and 434,000 CI/CD pipelines
1 Aug 2026
High1 Aug 2026
Paylogix LLC
Sector not stated · Records not stated
Personal information exposed, class action investigation launched
1 Aug 2026
Critical1 Aug 2026
Conduent
Healthcare · 62,200,000 records
62.2 million people impacted, 3rd-largest US healthcare breach ever
1 Aug 2026
High1 Aug 2026
Williams Brothers Construction
Sector not stated · 21,537 records
Ransomware breach exposed data of 21,537 individuals
1 Aug 2026
Critical1 Aug 2026
French Tax Authority
Government · Records not stated
670,000 French taxpayers' personal and tax data stolen and offered online
1 Aug 2026
High1 Aug 2026
Police National Legal Database
Government · Records not stated
135,000 contact records stolen by ExfilSquad, leaked on dark web
1 Aug 2026
Critical1 Aug 2026
Thailand's Digital Ministry
Government · Records not stated
221 million exposed login records identified in government systems
1 Aug 2026
High1 Aug 2026
Alation
Technology · Records not stated
Unauthorized access to systems confirmed; data search and AI company investigating breach
1 Aug 2026
Critical1 Aug 2026
CareCloud
Healthcare · 3,700,000 records
3.7M patients' medical records stolen in cyberattack, one of largest healthcare breaches this year
1 Aug 2026
Critical1 Aug 2026
Conduent
Healthcare · 62,200,000 records
62.2 million people affected; third-largest US healthcare breach ever
1 Aug 2026
High1 Aug 2026
Data breach
Legal · 1,687 records
Data breach exposed personal information of 1,687 people including SSNs and health records
1 Aug 2026
High1 Aug 2026
Nova Scotia Power
Sector not stated · Records not stated
Three decades of customer information hacked; digital copy was not deleted as planned
1 Aug 2026
High1 Aug 2026
French Tax Authority
Government · Records not stated
More than 670,000 French taxpayers' personal and tax information stolen and offered online
1 Aug 2026
High1 Aug 2026
Amgen
Healthcare · Records not stated
Hackers accessed cloud environment stealing patient health information and proprietary company data
1 Aug 2026
Critical1 Aug 2026
Thailand Digital Ministry
Government · Records not stated
221 million exposed login records from state systems identified, MFA mandate sought
1 Aug 2026
High1 Aug 2026
Comcast (Xfinity)
Technology · 35,000,000 records
Cyberattack exposed personal information of Xfinity customers; $117.5 million settlement reached
1 Aug 2026
Critical1 Aug 2026
Heights Finance
Finance · 1,200,000 records
At least 1.2 million individuals impacted; names, addresses, phone numbers, Social Security numbers and financial information stolen
1 Aug 2026
High1 Aug 2026
SafePal
Technology · 39,798 records
39,798 customers exposed with names, addresses, and phone numbers leaked
1 Aug 2026
Were you affected?