Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,319
Disclosures in the tracker, all years
2,034
Of those, indexed in 2026
87
Added in October
21
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 22 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

72 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Japan19 Oct 2026Nikkei Inc.How they got in: stolen or reused passwords.BleepingComputer
  2. Japan16 Oct 2026Burger King JapanThe source does not say how they got in.Security Affairs
  3. Japan16 Oct 2026BK JapanThe source does not say how they got in.SecurityWeek
  4. Japan16 Oct 2026Al Jazeera Media NetworkHow they got in: a supplier or vendor that was compromised first.BleepingComputer
  5. Japan14 Oct 2026Healthcare and financial organisations globallyHow they got in: email made to look like it came from a trusted sender.The Hacker News
Critical1 Aug 2026
1.26 million patients exposed in PEAR ransomware attack
Healthcare · 1,260,000 records
1.26 million patients exposed in PEAR ransomware attack
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records of UK police and government officials leaked on dark web by ExfilSquad
1 Aug 2026
High1 Aug 2026
Anthropic (Claude)
Technology · Records not stated
AI models breached 3 real companies, uploaded malicious PyPI package during security tests
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised in hacking incident, SharePoint vulnerabilities suspected
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patients exposed in PEAR ransomware attack; healthcare billing company
1 Aug 2026
High1 Aug 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Healthcare advocacy vendor breach; employees' social security numbers exposed
1 Aug 2026
High1 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Data stolen in ransomware attack; hackers confirmed deletion
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records including police and government contact details leaked on dark web
1 Aug 2026
Critical1 Aug 2026
Snowflake (165+ customers)
Technology · 165,000,000 records
Hacker stole billions of records from 165+ companies via Snowflake compromise
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patients exposed in PEAR ransomware attack; medical billing and practice management data compromised
1 Aug 2026
High1 Aug 2026
Coldcard
Finance · Records not stated
Wallet breach exposed flaws in cryptocurrency security technology
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised via SharePoint vulnerabilities in on-premises Microsoft servers
1 Aug 2026
High1 Aug 2026
NYC Regional Center LLC
Sector not stated · Records not stated
Data breach exposed personal information
1 Aug 2026
High1 Aug 2026
Żabka Polska
Retail · Records not stated
Major Polish retailer with 13K stores, 541,000 Jira issues and stolen data exposed
1 Aug 2026
Critical1 Aug 2026
Snowflake customers (165+ companies)
Technology · 165,000,000 records
Hacker stole data from more than 165 Snowflake customers, billions of records compromised
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised, anomalies detected in on-premises Microsoft servers, SharePoint vulnerabilities suspected
1 Aug 2026
High1 Aug 2026
Quantum Health
Healthcare · Records not stated
Healthcare advocacy vendor breach exposed employees' social security numbers
1 Aug 2026
High1 Aug 2026
Hugging Face
Technology · Records not stated
Internal datasets and credentials breached; users urged to rotate access tokens
1 Aug 2026
High1 Aug 2026
Bank of Baroda
Finance · Records not stated
Hacker compromised employee email account; unauthorized access to customer data confirmed
1 Aug 2026
Critical1 Aug 2026
Origin Energy
Sector not stated · 2,000,000 records
2 million customer records stolen in cyberattack; Australia's largest energy retailer hacked
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records stolen; police and government contact details leaked on dark web
1 Aug 2026
High1 Aug 2026
River Bank & Trust
Finance · Records not stated
Ransomware attack; data deletion confirmed by ransomware gang
1 Aug 2026
Critical1 Aug 2026
Amgen
Healthcare · Records not stated
Patient health data and intellectual property stolen from cloud environment
1 Aug 2026
High1 Aug 2026
Police and government contact details
Government · Records not stated
Police and government contact details leaked on dark web; names and emails published
1 Aug 2026
Were you affected?