Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,362
Disclosures in the tracker, all years
2,078
Of those, indexed in 2026
138
Added in October
17
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 29 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

76 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Japan22 Oct 2026CapcomThe source does not say how they got in.BleepingComputer
  2. Japan19 Oct 2026Nikkei Inc.How they got in: stolen or reused passwords.BleepingComputer
Critical1 Oct 2025
Capita
Sector not stated · 6,600,000 records
6.6 million records exposed due to 58-hour delay in breach response, resulting in £14M fine
1 Oct 2025
High1 Oct 2025
Salesforce
Technology · Records not stated
Attackers used social engineering and OAuth exploits to breach customer data
1 Oct 2025
High1 Oct 2025
Capita
Sector not stated · Records not stated
Customer data breach resulting in ICO fine of £14 million for GDPR infringements
1 Oct 2025
Critical1 Oct 2025
Canadian Tire
Retail · 38,000,000 records
E-commerce database breach exposed names, addresses, emails, birth years of 38 million customer accounts
1 Oct 2025
Critical1 Oct 2025
PNC Financial Services Group
Finance · 740,000 records
Data breach exposed 740,000 records of personally identifiable information; class action filed.
1 Oct 2025
Critical1 Oct 2025
Unlimited Technology Systems
Healthcare · Records not stated
Revenue cycle management provider breach exposed 3.8 million healthcare patients' information including personal and medical data.
1 Oct 2025
High1 Oct 2025
Motility
Technology · Records not stated
Ransomware attack where hackers encrypted servers supporting car dealership software operations
1 Oct 2025
High1 Oct 2025
Salesforce
Technology · Records not stated
Attackers used social engineering and OAuth exploits to breach systems and access customer data
1 Oct 2025
High1 Oct 2025
Mango
Retail · Records not stated
Spanish fast-fashion retailer; limited customer information exposed via external marketing provider breach
1 Oct 2025
Critical1 Oct 2025
Canadian Tire
Retail · 38,000,000 records
38 million customer accounts exposed including names, addresses, emails, birth years, encrypted passwords
1 Oct 2025
Critical1 Oct 2025
PNC Financial Services Group
Finance · 740,000 records
Data breach exposing 740,000 customer records with inadequate security measures
1 Oct 2025
Critical1 Oct 2025
Unlimited Technology Systems
Healthcare · Records not stated
Revenue cycle management provider exposed 3.8 million healthcare patients' information
1 Oct 2025
Critical1 Oct 2025
Multiple (Email Password Leak)
Technology · 183,000,000 records
183 million email passwords exposed including tens of millions Gmail accounts
1 Oct 2025
High1 Oct 2025
U.S. Government
Government · 53,070 records
Password exposure revealed 53,070 passwords associated with U.S. government email domains exposed since 2024
1 Oct 2025
Critical1 Oct 2025
Multiple (Email Passwords)
Technology · 183,000,000 records
183 million email passwords exposed, including tens of millions Gmail accounts
1 Oct 2025
Critical1 Oct 2025
Unknown (Email providers)
Technology · 183,000,000 records
183 million email passwords exposed, including tens of millions Gmail accounts
1 Oct 2025
Critical1 Oct 2025
Conduent Business Services, LLC
Sector not stated · 10,515,849 records
Data breach compromised sensitive information of 10,515,849 individuals; millions notified a year later
1 Oct 2025
Critical1 Oct 2025
U.S. Government Civil Servants
Government · Records not stated
Thousands of civil servants' passwords exposed since early 2024, including White House credentials
1 Oct 2025
Critical1 Oct 2025
Multiple (Email Providers)
Technology · 183,000,000 records
183 million email passwords exposed including tens of millions Gmail accounts
1 Oct 2025
Critical1 Oct 2025
Email Password Leak (183M)
Sector not stated · 183,000,000 records
183 million email passwords exposed including tens of millions of Gmail accounts
1 Oct 2025
Critical1 Oct 2025
Organisation not named
Finance · 740,000 records
The disclosure as indexed does not name the organisation.
Class action lawsuit alleges failure to secure 740,000 records containing personally identifiable information
1 Oct 2025
Critical1 Oct 2025
UK Government Civil Service
Government · Records not stated
Thousands of civil servants' passwords exposed since early 2024, including White House-linked credentials
1 Oct 2025
High1 Oct 2025
IEH Corporation
Government · Records not stated
Military device manufacturer disclosed cyber incident to SEC; produces products for military satellites, missiles and fighter jets
1 Oct 2025
Critical1 Oct 2025
Multiple (Email/Gmail)
Technology · 183,000,000 records
183 million email passwords exposed including tens of millions Gmail accounts
1 Oct 2025
Were you affected?