Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,346
Disclosures in the tracker, all years
2,059
Of those, indexed in 2026
120
Added in October
12
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 27 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

74 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Japan22 Oct 2026CapcomThe source does not say how they got in.BleepingComputer
  2. Japan19 Oct 2026Nikkei Inc.How they got in: stolen or reused passwords.BleepingComputer
  3. Japan16 Oct 2026Burger King JapanThe source does not say how they got in.Security Affairs
  4. Japan16 Oct 2026BK JapanThe source does not say how they got in.SecurityWeek
  5. Japan16 Oct 2026Al Jazeera Media NetworkHow they got in: a supplier or vendor that was compromised first.BleepingComputer
High1 Mar 2026
Foster City Government
Government · Records not stated
Ransomware attack forced city computer systems offline for days
1 Mar 2026
Critical1 Mar 2026
CISA (US Department)
Government · Records not stated
Breached through Cisco vulnerability; FIRESTARTER backdoor allowed persistent access through March 2026
1 Mar 2026
High1 Mar 2026
Partnered Health
Healthcare · Records not stated
Personal information and medical details breached across 21 clinics in Australian healthcare provider attack
1 Mar 2026
High1 Mar 2026
Organisation not named
Legal · 13,000 records
The disclosure as indexed does not name the organisation.
13,000 patient records in New Jersey exposed through cyberattack on law firm representing state hospitals
1 Mar 2026
High1 Mar 2026
Ransomware attack resulted in data
Education · Records not stated
Ransomware attack resulted in data leak including driver's license numbers and voter registration data
1 Mar 2026
Critical1 Mar 2026
Canada Life
Finance · 5,500,000 records
Threat actor claimed 5.5 million records allegedly tied to Canada's biggest insurer for sale on cybercrime marketplace
1 Mar 2026
High1 Mar 2026
Ericsson
Technology · 15,661 records
Vishing attack exposed data of 15,661 people including SSNs, financial and medical records
1 Mar 2026
High1 Mar 2026
Lehigh Carbon Community College
Education · Records not stated
Data breach caused extended school closure, extent of exposure unclear
1 Mar 2026
Critical1 Mar 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
US agency breached through Cisco vulnerability; FIRESTARTER backdoor allowed persistent access through March 2026
1 Mar 2026
High1 Mar 2026
Ransomware attack caused data
Healthcare · Records not stated
Ransomware attack caused data leak exposing patient information from Multiethnic Cohort Study including driver's license and voter data
1 Mar 2026
Critical1 Mar 2026
IDMerit
Technology · Records not stated
Unprotected database exposed 1 billion identity records used by banks and identity verification
1 Mar 2026
High1 Mar 2026
CareCloud
Healthcare · Records not stated
Healthcare software firm informed SEC of potential patient data leak; electronic health records may have been leaked after system intrusion
1 Mar 2026
High1 Mar 2026
Companies House UK
Government · Records not stated
Data exposed during five-month security issue affecting UK firm records
1 Mar 2026
High1 Mar 2026
UK Companies House
Government · Records not stated
Data exposed during five-month security issue affecting all UK firms' records
1 Mar 2026
High1 Mar 2026
Foster City
Government · Records not stated
Ransomware attack forced city computer system offline; state of emergency declared
1 Mar 2026
High1 Mar 2026
University of Hawaiʻi Cancer Center
Education · Records not stated
Data leak following ransomware attack exposing Multiethnic Cohort Study data including driver's license and voter IDs
1 Mar 2026
Critical1 Mar 2026
PIH Health
Healthcare · 2,950,000 records
Healthcare provider notified 2.95 million patients of 2024 hacking incident/ransomware
1 Mar 2026
High1 Mar 2026
Organisation not named
Education · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack led to data leak including driver's license numbers and voter information
1 Mar 2026
High1 Mar 2026
CISA (U.S. Department)
Government · Records not stated
US agency breached through Cisco vulnerability with FIRESTARTER backdoor malware
1 Mar 2026
High1 Mar 2026
Organisation not named
Education · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack led to data leak including driver's license numbers and voter info
1 Mar 2026
Critical1 Mar 2026
Qantas
Sector not stated · 5,670,000 records
5.67 million customer records exposed via vishing attack tech support scam
1 Mar 2026
High1 Mar 2026
South Florida Injury Centers
Healthcare · 1,525 records
1,525 records breached exposing SSNs and medical records
1 Mar 2026
High1 Mar 2026
Ernst & Young (EY)
Finance · Records not stated
Third-party vendor breach exposed tax client data after 81-day notification delay
1 Mar 2026
High1 Mar 2026
Tribeca Festival
Sector not stated · 666,000 records
666,000 records exposed including celebrity contact information from unprotected database
1 Mar 2026
Were you affected?