Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,319
Disclosures in the tracker, all years
2,034
Of those, indexed in 2026
87
Added in October
21
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 22 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

72 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Japan19 Oct 2026Nikkei Inc.How they got in: stolen or reused passwords.BleepingComputer
  2. Japan16 Oct 2026Burger King JapanThe source does not say how they got in.Security Affairs
  3. Japan16 Oct 2026BK JapanThe source does not say how they got in.SecurityWeek
  4. Japan16 Oct 2026Al Jazeera Media NetworkHow they got in: a supplier or vendor that was compromised first.BleepingComputer
  5. Japan14 Oct 2026Healthcare and financial organisations globallyHow they got in: email made to look like it came from a trusted sender.The Hacker News
High1 Aug 2026
Law Firm (unnamed)
Legal · 13,000 records
Breached law firm exposed hospital records for nearly 13,000 patients in New Jersey
1 Aug 2026
Critical1 Aug 2026
Healthcare billing company breach
Healthcare · 1,260,000 records
Healthcare billing company breach exposed sensitive data affecting 1.26 million people
1 Aug 2026
High1 Aug 2026
Synnovis/Mid South Essex NHS
Healthcare · 900,000 records
Major ransomware attack stole thousands of NHS patient records from Essex healthcare trust
1 Aug 2026
High1 Aug 2026
Ericsson
Technology · 15,661 records
Voice phishing attack exposed data of 15,661 people including SSNs and medical records
1 Aug 2026
High1 Aug 2026
EY Global Advisory
Finance · Records not stated
Personal records acquired in unauthorized access
1 Aug 2026
Critical1 Aug 2026
KDDI Telco Group
Technology · 12,000,000 records
12M email credentials exposed across six ISPs
1 Aug 2026
Critical1 Aug 2026
30M patient records stolen including 1M SSNs
Healthcare · 30,000,000 records
30M patient records stolen including 1M SSNs
1 Aug 2026
High1 Aug 2026
Synnovis/Essex NHS
Healthcare · 900,000 records
Ransomware attack stole thousands of patient records held by NHS trust in Essex; disclosed over 6 months after notification
1 Aug 2026
High1 Aug 2026
U.S. Civil Service Agencies
Government · Records not stated
Thousands of civil servants' passwords exposed since early 2024, including White House linked credentials
1 Aug 2026
High1 Aug 2026
Multiple Gaming Platforms
Technology · Records not stated
Over 11 million gaming account credentials exposed in 2024 data leaks
1 Aug 2026
Critical1 Aug 2026
US Homeland Security
Government · Records not stated
HSIN government network breached during World Cup
1 Aug 2026
High1 Aug 2026
Cherry Creek School District
Education · Records not stated
Student data breached; district notified families and facing lawsuit
1 Aug 2026
High1 Aug 2026
Personal information
Retail · Records not stated
Personal information exposed in data security incident; $40M settlement reached
1 Aug 2026
High1 Aug 2026
KT Corporation
Technology · Records not stated
Customer data breach affecting multiple individuals in South Korea telecommunications
1 Aug 2026
Critical1 Aug 2026
DentaQuest
Healthcare · Records not stated
23M dental health records exposed
1 Aug 2026
Critical1 Aug 2026
MCBS
Healthcare · 1,200,000 records
Atlanta-based medical business management company data breach affected 1.2 million individuals
1 Aug 2026
High1 Aug 2026
Illuminate Education
Education · Records not stated
Data breach at Wisconsin-based edtech company resulted in FTC settlement and data deletion agreement
1 Aug 2026
High1 Aug 2026
Unnamed Law Firm
Legal · 13,000 records
Cyberattack on law firm exposed hospital records for approximately 13,000 patients in New Jersey
1 Aug 2026
High1 Aug 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Thousands of patient records stolen during major ransomware attack disrupting healthcare services
1 Aug 2026
High1 Aug 2026
Essex NHS Trust
Healthcare · 900,000 records
Thousands of patient records stolen in cyber attack; disclosure delayed over 6 months
1 Aug 2026
Critical1 Aug 2026
U.S. Civil Service/White House
Government · Records not stated
Thousands of civil servants' passwords exposed, including White House-linked accounts
1 Aug 2026
High1 Aug 2026
Sandhills Medical Foundation
Healthcare · 170,000 records
Ransomware breach disclosed affecting approximately 170,000 individuals
1 Aug 2026
Critical1 Aug 2026
Fairlife (Coca-Cola subsidiary)
Retail · Records not stated
Ransomware attack by Anubis leaked 1 TB of stolen data after ransom demand refused
1 Aug 2026
High1 Aug 2026
Legend Senior Care
Healthcare · Records not stated
Ransomware attack disclosed; affected senior care provider data
1 Aug 2026
Were you affected?