Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,339
Disclosures in the tracker, all years
2,052
Of those, indexed in 2026
111
Added in October
18
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 25 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

74 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. India20 Oct 2026EMudhraThe source does not say how they got in.The Hacker News
High31 Jul 2026
KT Corp
Technology · Records not stated
South Korea telecom giant hit with massive data breach fine by Personal Information Protection Commission
31 Jul 2026
Critical31 Jul 2026
Transport for London (TfL)
Government · Records not stated
Cyber attack caused £39m loss; hackers gained access to transport network core systems
31 Jul 2026
Critical31 Jul 2026
EVO Banco
Finance · 1,270,000 records
2024 API vulnerability exposed financial and identity data of 1.27 million records
31 Jul 2026
High31 Jul 2026
Intesa Sanpaolo S.p.A.
Finance · Records not stated
Employee unlawfully accessed customer data over two years, €31.8m impact
31 Jul 2026
High31 Jul 2026
Synnovis/NHS Essex
Healthcare · 900,000 records
Thousands of patient records stolen in ransomware attack affecting NHS trust in Essex
31 Jul 2026
Critical31 Jul 2026
McLaren Health Care
Healthcare · Records not stated
Ransomware attacks in 2023 and 2024 exposed data on 3.2 million victims
31 Jul 2026
Critical31 Jul 2026
Instructure
Education · Records not stated
Supply chain breach involving Canvas platform generated over 50% of breach notices in 2026
31 Jul 2026
High31 Jul 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
Data breach with cybersecurity vulnerabilities; fined €42 million by French regulator in Jan 2026
31 Jul 2026
High31 Jul 2026
Yearslong data breach of residents' private health-related information
Government · Records not stated
Yearslong data breach of residents' private health-related information
31 Jul 2026
High31 Jul 2026
CommonSpirit Health
Healthcare · 19,027 records
19,027 patient records exposing personal and medical information
31 Jul 2026
High31 Jul 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen in ransomware attack
31 Jul 2026
High31 Jul 2026
EY (Ernst & Young)
Legal · Records not stated
Third-party vendor breach exposed sensitive tax client data after 81-day notification delay
31 Jul 2026
Critical31 Jul 2026
Spectrum (Charter Communications)
Technology · 42,000,000 records
Data breach exposed 4.9 million confirmed accounts with 42 million records claimed stolen
31 Jul 2026
Critical31 Jul 2026
ANTS (French ID Agency)
Government · 19,000,000 records
Cyberattack exposed 19 million records with personal data linked to French identity documents
31 Jul 2026
High31 Jul 2026
U.S. Civil Service/White House
Government · Records not stated
Thousands of civil servants' passwords and White House-linked passwords exposed since early 2024
31 Jul 2026
Critical31 Jul 2026
TriZetto
Healthcare · 3,000,000 records
More than 3 million people impacted by breach of healthcare tech provider software affecting multiple counties
31 Jul 2026
Critical31 Jul 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen in ransomware attack affecting healthcare services
31 Jul 2026
Critical31 Jul 2026
FinWise Bank
Finance · 689,000 records
Insider breach exposed data of 689,000 customers in 2024
31 Jul 2026
Medium31 Jul 2026
Sax
Sector not stated · Records not stated
2024 data breach disclosed
31 Jul 2026
Critical31 Jul 2026
LastPass
Technology · 1,600,000 records
2022 breach exposed 1.6 million users, resulted in ICO fine
31 Jul 2026
High31 Jul 2026
Synnovis NHS
Healthcare · 900,000 records
Thousands of patient records stolen during ransomware attack on Mid South Essex Foundation Trust
31 Jul 2026
High31 Jul 2026
Essex NHS
Healthcare · 900,000 records
Patient records stolen in cyber attack, disclosed over 6 months after notification
31 Jul 2026
High31 Jul 2026
Huntsville Hospital Health System
Healthcare · Records not stated
Third-party data breach exposed patient information at multiple facilities
31 Jul 2026
Critical31 Jul 2026
PEAR ransomware attack
Healthcare · 1,260,000 records
PEAR ransomware attack exposed 1.26 million patient records from medical billing company
31 Jul 2026
Were you affected?