Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,345
Disclosures in the tracker, all years
2,058
Of those, indexed in 2026
119
Added in October
16
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 26 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

74 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. India20 Oct 2026EMudhraThe source does not say how they got in.The Hacker News
Critical1 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patients exposed in PEAR ransomware attack on healthcare billing company
1 Jul 2026
Critical1 Jul 2026
Healthcare billing company ransomware attack
Healthcare · 1,260,000 records
Healthcare billing company ransomware attack exposed 1.26 million patient records in PEAR ransomware attack.
1 Jul 2026
High1 Jul 2026
KT (Korean Telecommunications)
Technology · Records not stated
Personal data breach and unauthorized micropayment damages via illegal base stations
1 Jul 2026
High1 Jul 2026
Department for Homeland Security
Government · Records not stated
Network intrusion on Homeland Security Information Network confirmed after false positives
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
PEAR ransomware attack on medical billing company exposed 1.26 million patient records
1 Jul 2026
High1 Jul 2026
Network intrusion on Homeland Security Information Network
Government · Records not stated
Network intrusion on Homeland Security Information Network confirmed after false positives
1 Jul 2026
High1 Jul 2026
Cerner (Huntsville Hospital)
Healthcare · Records not stated
Patient data compromised through third-party vendor breach at Huntsville Hospital Health System
1 Jul 2026
Critical1 Jul 2026
Healthcare billing company
Healthcare · 1,260,000 records
Healthcare billing company exposed 1.26 million patient records in PEAR ransomware attack
1 Jul 2026
High1 Jul 2026
Department of Homeland Security
Government · Records not stated
Network intrusion confirmed on HSIN used for World Cup operations
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patient records exposed in PEAR ransomware attack on billing company
1 Jul 2026
Critical1 Jul 2026
Puerto Rico Government Agency
Government · Records not stated
Cybersecurity loophole in government mapping service exposed 1 million social security numbers
1 Jul 2026
High1 Jul 2026
KT Corporation
Technology · Records not stated
Personal data breach via illegal base stations caused unauthorized micropayments
1 Jul 2026
High1 Jul 2026
Coca-Cola (Fairlife subsidiary)
Sector not stated · Records not stated
Ransomware attack resulted in theft of company data from dairy subsidiary
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patients exposed in PEAR ransomware attack on healthcare billing and practice-management company
1 Jul 2026
Critical1 Jul 2026
MCBS Medical Billing
Healthcare · 1,260,000 records
1.26 million patients exposed in PEAR ransomware attack on billing and practice-management systems
1 Jul 2026
High1 Jul 2026
Hospital software vendor
Healthcare · Records not stated
Customer data breach from major healthcare software vendor via supply-chain attack
1 Jul 2026
Critical1 Jul 2026
Fortinet
Technology · Records not stated
FortiBleed campaign; 73,000+ devices affected; verified administrator credentials and VPN data exposed
1 Jul 2026
High1 Jul 2026
Evanston Township High School
Education · Records not stated
Cyberattack disrupted phone systems; students and parents advised to use email
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patients exposed in PEAR ransomware attack on billing system
1 Jul 2026
High1 Jul 2026
Police National Legal Database
Government · Records not stated
135,000 contact records stolen and leaked on dark web by ExfilSquad hacker group
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patients exposed in PEAR ransomware attack on medical billing systems
1 Jul 2026
High1 Jul 2026
KT (South Korea)
Technology · Records not stated
Personal data breach via illegal base stations causing unauthorized micropayment damages
1 Jul 2026
High1 Jul 2026
Valve
Technology · Records not stated
Steam hardware customer data stolen, affecting European customers
1 Jul 2026
Critical1 Jul 2026
Estée Lauder
Retail · Records not stated
Oracle E-Business Suite breach exposed SSNs, passports, health records via Clop campaign
1 Jul 2026
Were you affected?