Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,345
Disclosures in the tracker, all years
2,058
Of those, indexed in 2026
119
Added in October
11
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 27 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

74 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Japan22 Oct 2026CapcomThe source does not say how they got in.BleepingComputer
  2. Japan19 Oct 2026Nikkei Inc.How they got in: stolen or reused passwords.BleepingComputer
  3. Japan16 Oct 2026Burger King JapanThe source does not say how they got in.Security Affairs
  4. Japan16 Oct 2026BK JapanThe source does not say how they got in.SecurityWeek
  5. Japan16 Oct 2026Al Jazeera Media NetworkHow they got in: a supplier or vendor that was compromised first.BleepingComputer
Critical1 Apr 2026
Organisation not named
Technology · 165,000,000 records
The disclosure as indexed does not name the organisation.
165 organizations breached via Snowflake platform by ShinyHunters through compromised Anodot access
1 Apr 2026
High1 Apr 2026
Ernst & Young
Legal · Records not stated
Third-party IT service management platform breached; client tax data exposed March 28 - April 12, 2026
1 Apr 2026
Medium1 Apr 2026
T-Mobile
Technology · Records not stated
Insider data breach incident with limited impact
1 Apr 2026
High1 Apr 2026
Heart South Cardiovascular Group
Healthcare · 46,666 records
Data breach affected 46,666 patients, exposing personal and health records
1 Apr 2026
High1 Apr 2026
CISA (US Government)
Government · Records not stated
US agency breached through Cisco vulnerability; FIRESTARTER backdoor allowed access through March
1 Apr 2026
Critical1 Apr 2026
Marquis Software Solutions
Finance · Records not stated
Ransomware attack exposed 788,000 financial records including names, addresses and card numbers
1 Apr 2026
High1 Apr 2026
CISA/US Government Agency
Government · Records not stated
Unnamed U.S. department breached through Cisco vulnerability; FIRESTARTER backdoor provided persistent access through March 2026
1 Apr 2026
Critical1 Apr 2026
CISA (US Agency)
Government · Records not stated
Unnamed US department breached via Cisco vulnerability, FIRESTARTER backdoor allowed persistent access
1 Apr 2026
High1 Apr 2026
Sandhills Medical Foundation
Healthcare · 170,000 records
Ransomware breach affecting 170,000 individuals in South Carolina
1 Apr 2026
High1 Apr 2026
Tribeca Film Festival
Sector not stated · 666,000 records
666,000 records including celebrity contact data exposed from unprotected database without password or encryption
1 Apr 2026
Critical1 Apr 2026
ANTS (France)
Government · 19,000,000 records
Cyberattack on French identity agency exposed 19 million records with personal data
1 Apr 2026
High1 Apr 2026
Cherry Creek School District
Education · Records not stated
Student data breach resulted in lawsuit against school district
1 Apr 2026
Critical1 Apr 2026
US Government Agency (CISA)
Government · Records not stated
Unnamed US agency breached through Cisco vulnerability; FIRESTARTER backdoor allowed access through March 2026
1 Apr 2026
Critical1 Apr 2026
Unnamed U.S. Department (CISA)
Government · Records not stated
Breached through Cisco vulnerability; FIRESTARTER backdoor allowed unauthorized access through March
1 Apr 2026
High1 Apr 2026
Huntsville Hospital Health System
Healthcare · Records not stated
Third-party data breach compromised patient information
1 Apr 2026
High1 Apr 2026
FirstClass
Retail · Records not stated
Australian travel agency customer records compromised; threat actor claimed data on underground hacking forums
1 Apr 2026
Critical1 Apr 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
ShinyHunters breached Rockstar Games via Snowflake; 165 organizations affected in supply chain attack
1 Apr 2026
Critical1 Apr 2026
Rockstar Games
Technology · Records not stated
Breach through compromised Anodot Snowflake access by ShinyHunters group; 165 organizations affected in cascading attack.
1 Apr 2026
Critical1 Apr 2026
CISA (US Cybersecurity Agency)
Government · Records not stated
Breached through Cisco vulnerability; FIRESTARTER backdoor allowed persistent access through March
1 Apr 2026
Critical1 Apr 2026
ANTS (French ID Agency)
Government · 19,000,000 records
Cyberattack exposed 19 million records linked to personal identity data
1 Apr 2026
High1 Apr 2026
Mexican Government Agencies
Government · Records not stated
Single hacker compromised 9 government agencies using Claude Code and OpenAI tools
1 Apr 2026
High1 Apr 2026
U.S. Government Agency (CISA)
Government · Records not stated
Unnamed federal agency breached via Cisco vulnerability; FIRESTARTER backdoor maintained access through March
1 Apr 2026
High1 Apr 2026
Legend Senior Care
Healthcare · Records not stated
Senior care provider affected by ransomware attack exposing patient data
1 Apr 2026
High1 Apr 2026
Windward Life Care
Healthcare · Records not stated
Senior care provider affected by ransomware attack exposing patient data
1 Apr 2026
Were you affected?