Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,363
Disclosures in the tracker, all years
2,079
Of those, indexed in 2026
140
Added in October
19
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 29 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

76 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Japan22 Oct 2026CapcomThe source does not say how they got in.BleepingComputer
  2. Japan19 Oct 2026Nikkei Inc.How they got in: stolen or reused passwords.BleepingComputer
Critical1 Sep 2025
Organisation not named
Finance · 160,000,000 records
The disclosure as indexed does not name the organisation.
ShinyHunters exfiltrated over 160 million records from Vietnam's financial system databases
1 Sep 2025
Critical1 Sep 2025
Federal Agency (GeoServer)
Government · Records not stated
Attackers breached federal agency via critical GeoServer flaw CVE-2024-36401
1 Sep 2025
High1 Sep 2025
FinWise Bank
Finance · 689,000 records
Insider breach exposed 689,000 customer records
1 Sep 2025
High1 Sep 2025
MedicSolution
Healthcare · Records not stated
KillSec ransomware attack on healthcare software solutions provider
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Finance · 160,000,000 records
The disclosure as indexed does not name the organisation.
ShinyHunters exfiltrated over 160 million records from CIC databases
1 Sep 2025
Critical1 Sep 2025
FinWise
Finance · 689,000 records
Former employee accessed unencrypted data affecting 689,000 users
1 Sep 2025
High1 Sep 2025
Giglio
Retail · 1,026,468 records
1,026,468 records exposed, Email addresses, Names, Phone numbers, Physical addresses
1 Sep 2025
Medium27 Aug 2025
TheSqua.re
Technology · 107,041 records
107,041 records exposed, Email addresses, Geographic locations, Names, Phone numbers
27 Aug 2025
High18 Aug 2025
Allianz Life
Technology · 1,115,061 records
1,115,061 records exposed, Dates of birth, Email addresses, Genders, Names and 2 more
18 Aug 2025
High8 Aug 2025
Unigame
Technology · 843,696 records
843,696 records exposed, Email addresses, Passwords
8 Aug 2025
High1 Aug 2025
Workday
Technology · Records not stated
HR giant hackers steal personal data in recent breach
1 Aug 2025
High1 Aug 2025
Cerner
Healthcare · Records not stated
Unauthorized third party accessed health records; breach affected Huntsville Hospital and other health systems
1 Aug 2025
High1 Aug 2025
Workday
Technology · Records not stated
HR giant; hackers stole personal data in recent breach
1 Aug 2025
High1 Aug 2025
Workday
Technology · Records not stated
Hackers stole personal data in recent breach
1 Aug 2025
High1 Aug 2025
US Bank
Finance · Records not stated
Data breach following LockBit ransomware attack with threat to publish stolen data
1 Aug 2025
Critical1 Aug 2025
TransUnion
Finance · 4,400,000 records
Data breach with hackers stealing 4.4 million customers' personal information
1 Aug 2025
High1 Aug 2025
Workday
Technology · Records not stated
HR giant's breach exposed employee and customer personal data
1 Aug 2025
Critical1 Aug 2025
Organisation not named
Healthcare · 1,150,000 records
The disclosure as indexed does not name the organisation.
Ransomware attack in August 2025 affected 1.15 million individuals
1 Aug 2025
High1 Aug 2025
Workday
Technology · Records not stated
HR giant hackers stole personal data in recent breach
1 Aug 2025
High1 Aug 2025
Jaguar Land Rover
Sector not stated · Records not stated
Cyberattack in August stole data related to current and former employees and contractors
1 Aug 2025
Critical1 Aug 2025
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Breached via private APN; facility supplies heat to approximately 50,000 residents
1 Aug 2025
Critical1 Aug 2025
Polish Energy Plant
Government · Records not stated
Heat-and-power facility breached via private APN, supplies 50,000 residents
1 Aug 2025
High1 Aug 2025
Cerner (Huntsville Hospital)
Healthcare · Records not stated
Unauthorized third party accessed patient electronic health records via vendor system
1 Aug 2025
High1 Aug 2025
Cerner (Third-party vendor)
Healthcare · Records not stated
Patient data breach affecting Huntsville Hospital and other health systems
1 Aug 2025
Were you affected?