Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,291
Disclosures in the tracker, all years
2,004
Of those, indexed in 2026
49
Added in October
9
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 17 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

64 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Japan16 Oct 2026Burger King JapanThe source does not say how they got in.Security Affairs
  2. Japan16 Oct 2026BK JapanThe source does not say how they got in.SecurityWeek
  3. Japan16 Oct 2026Al Jazeera Media NetworkHow they got in: a supplier or vendor that was compromised first.BleepingComputer
  4. Japan14 Oct 2026Healthcare and financial organisations globallyHow they got in: email made to look like it came from a trusted sender.The Hacker News
  5. Japan8 Oct 2026Park24The source does not say how they got in.The Hacker News
  6. Japan7 Oct 2026AdvantestThe source does not say how they got in.SecurityWeek
Medium2 Oct 2026
Frontline Education breach
Education · Records not stated
Frontline Education is notifying school districts of a data breach after attackers exploited a vulnerability in third-party software to gain unauthorized access to its systems and steal employee information, including…
2 Oct 2026
High1 Oct 2026
Zizzl LLC
Sector not stated · Records not stated
Data breach exposed Social Security Numbers of 519 people
1 Oct 2026
Critical1 Oct 2026
Napoleon Perdis
Retail · 339,055 records
339,055 customer records exposed via vendor Retail Express
1 Oct 2026
High1 Oct 2026
Meta
Technology · Records not stated
Hackers stole source code and personal data of 1,500 employees via GitHub repositories using stolen credentials
1 Oct 2026
Critical1 Oct 2026
Educational Testing Service (ETS)
Education · Records not stated
Over 5.7 million California student records breached, including records dating back to 2006
1 Oct 2026
High1 Oct 2026
University of Illinois Chicago
Education · Records not stated
Ransomware attack on College of Medicine resulted in theft of personal information
1 Oct 2026
High1 Oct 2026
ASOS
Retail · Records not stated
Retailer data breach exposed more personal details than initially disclosed; BBC contacted by hackers
1 Oct 2026
Critical1 Oct 2026
BCHP and XTIUM
Healthcare · Records not stated
Medical data breach exposed SSNs of 62,871 CT and 825,000 NY residents; $2.7M settlement
1 Oct 2026
High1 Oct 2026
Data breach
Sector not stated · 400,000 records
Data breach exposed approximately 400,000 customer utility accounts
1 Oct 2026
Critical1 Oct 2026
Danish Government
Government · Records not stated
8 million citizens' records stolen from central database
1 Oct 2026
Medium1 Oct 2026
University of Illinois Chicago
Education · Records not stated
Ransomware attack on College of Medicine resulted in theft of some information
1 Oct 2026
High1 Oct 2026
FBI contractor (third-party platform)
Government · Records not stated
Security failure on third-party platform due to unapplied security patch led to data breach affecting thousands of employees
1 Oct 2026
High1 Oct 2026
ASOS
Retail · Records not stated
Hackers compromised third-party communication platform; breach exposed more personal details than initially reported including contact information
1 Oct 2026
Medium1 Oct 2026
Publica
Finance · Records not stated
Data leak after cyberattack hit external software supplier to Swiss pension fund
1 Oct 2026
High1 Oct 2026
Morgan Services
Sector not stated · Records not stated
Social Security numbers and names exposed in data breach
1 Oct 2026
High1 Oct 2026
Advantest
Technology · Records not stated
SSNs and passport data stolen in ransomware attack; disclosed 233 days after detection
1 Oct 2026
Critical1 Oct 2026
Oracle Health (Cerner)
Healthcare · 20,000,000 records
Nearly 20 million patient records exposed across 80 U.S. hospitals
1 Oct 2026
High1 Oct 2026
Canadian Mennonite University (CMU)
Education · Records not stated
Sensitive personal information including SINs and tax records stolen from thousands of current and former students and employees
1 Oct 2026
High1 Oct 2026
Daiwa Securities
Finance · 220,000 records
220,000 records including 110,000 with personal data exposed via unauthorized access to vendor server
1 Oct 2026
Critical1 Oct 2026
Lawson
Retail · 2,155,345 records
2,155,345 records of personal information leaked due to unauthorized access to Lawson IDs
1 Oct 2026
High1 Oct 2026
University of Illinois Chicago
Education · Records not stated
Ransomware attack on College of Medicine resulted in theft of medical information
1 Oct 2026
High1 Oct 2026
Holland & Knight
Legal · Records not stated
Unauthorized access to law firm systems affecting firm and 14 clients; data security incident disclosed
1 Oct 2026
High1 Oct 2026
ASOS
Retail · Records not stated
Third-party communication platform compromised; hackers accessed customer personal data beyond basic contact details
1 Oct 2026
Medium1 Oct 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
One of Poland’s major online invoicing platforms suffered a data breach that may have exposed information belonging to its users, their customers and business partners.
1 Oct 2026
Were you affected?