Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,332
Disclosures in the tracker, all years
2,046
Of those, indexed in 2026
104
Added in October
24
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 24 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

74 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Japan22 Oct 2026CapcomThe source does not say how they got in.BleepingComputer
  2. Japan19 Oct 2026Nikkei Inc.How they got in: stolen or reused passwords.BleepingComputer
  3. Japan16 Oct 2026Burger King JapanThe source does not say how they got in.Security Affairs
  4. Japan16 Oct 2026BK JapanThe source does not say how they got in.SecurityWeek
  5. Japan16 Oct 2026Al Jazeera Media NetworkHow they got in: a supplier or vendor that was compromised first.BleepingComputer
High1 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Network intrusion and data breach confirmed after initially ruled false positives
1 Jul 2026
Critical1 Jul 2026
MCBS Medical
Healthcare · 1,260,000 records
Medical billing company; 1.26 million patients exposed in PEAR ransomware attack affecting healthcare billing data
1 Jul 2026
High1 Jul 2026
Department for Education
Education · Records not stated
Data breach claimed by ExfilSquad group in ransomware attack
1 Jul 2026
Critical1 Jul 2026
Fortinet (FortiBleed campaign)
Technology · Records not stated
73,000+ FortiGate firewalls and VPN gateways exposed with valid admin and VPN credentials
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patients exposed in PEAR ransomware attack on healthcare billing company
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
Healthcare billing company ransomware attack exposed 1.26 million patient records in PEAR ransomware attack.
1 Jul 2026
High1 Jul 2026
KT (Korean Telecommunications)
Technology · Records not stated
Personal data breach and unauthorized micropayment damages via illegal base stations
1 Jul 2026
High1 Jul 2026
Department for Homeland Security
Government · Records not stated
Network intrusion on Homeland Security Information Network confirmed after false positives
1 Jul 2026
Critical1 Jul 2026
PEAR ransomware attack on medical billing company
Healthcare · 1,260,000 records
PEAR ransomware attack on medical billing company exposed 1.26 million patient records
1 Jul 2026
High1 Jul 2026
Network intrusion on Homeland Security Information Network
Government · Records not stated
Network intrusion on Homeland Security Information Network confirmed after false positives
1 Jul 2026
High1 Jul 2026
Cerner (Huntsville Hospital)
Healthcare · Records not stated
Patient data compromised through third-party vendor breach at Huntsville Hospital Health System
1 Jul 2026
Critical1 Jul 2026
Healthcare billing company
Healthcare · 1,260,000 records
Healthcare billing company exposed 1.26 million patient records in PEAR ransomware attack
1 Jul 2026
High1 Jul 2026
Department of Homeland Security
Government · Records not stated
Network intrusion confirmed on HSIN used for World Cup operations
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patient records exposed in PEAR ransomware attack on billing company
1 Jul 2026
Critical1 Jul 2026
Puerto Rico Government Agency
Government · Records not stated
Cybersecurity loophole in government mapping service exposed 1 million social security numbers
1 Jul 2026
High1 Jul 2026
KT Corporation
Technology · Records not stated
Personal data breach via illegal base stations caused unauthorized micropayments
1 Jul 2026
High1 Jul 2026
Coca-Cola (Fairlife subsidiary)
Sector not stated · Records not stated
Ransomware attack resulted in theft of company data from dairy subsidiary
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patients exposed in PEAR ransomware attack on healthcare billing and practice-management company
1 Jul 2026
Critical1 Jul 2026
MCBS Medical Billing
Healthcare · 1,260,000 records
1.26 million patients exposed in PEAR ransomware attack on billing and practice-management systems
1 Jul 2026
High1 Jul 2026
Hospital software vendor
Healthcare · Records not stated
Customer data breach from major healthcare software vendor via supply-chain attack
1 Jul 2026
Critical1 Jul 2026
Fortinet
Technology · Records not stated
FortiBleed campaign; 73,000+ devices affected; verified administrator credentials and VPN data exposed
1 Jul 2026
High1 Jul 2026
Evanston Township High School
Education · Records not stated
Cyberattack disrupted phone systems; students and parents advised to use email
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patients exposed in PEAR ransomware attack on billing system
1 Jul 2026
High1 Jul 2026
Police National Legal Database
Government · Records not stated
135,000 contact records stolen and leaked on dark web by ExfilSquad hacker group
1 Jul 2026
Were you affected?