Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,310
Disclosures in the tracker, all years
2,025
Of those, indexed in 2026
76
Added in October
22
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 20 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

73 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Japan16 Oct 2026Burger King JapanThe source does not say how they got in.Security Affairs
  2. Japan16 Oct 2026BK JapanThe source does not say how they got in.SecurityWeek
  3. Japan16 Oct 2026Al Jazeera Media NetworkHow they got in: a supplier or vendor that was compromised first.BleepingComputer
  4. Japan14 Oct 2026Healthcare and financial organisations globallyHow they got in: email made to look like it came from a trusted sender.The Hacker News
  5. Japan8 Oct 2026Park24The source does not say how they got in.The Hacker News
Critical23 Apr 2019
Organisation not named
Retail · 1,688,176 records
The disclosure as indexed does not name the organisation.
1,688,176 records exposed, Email addresses, IP addresses, Passwords, Usernames
23 Apr 2019
Critical20 Apr 2019
Morele.net
Retail · 2,467,304 records
2,467,304 records exposed, Email addresses, Names, Passwords, Phone numbers
20 Apr 2019
Critical18 Apr 2019
Bukalapak
Retail · 13,369,666 records
13,369,666 records exposed, Email addresses, IP addresses, Names, Passwords and 1 more
18 Apr 2019
Critical16 Apr 2019
JustDial (India)
Technology · 100,000,000 records
100M user records exposed through unprotected API endpoint, names, emails, phone, addresses
16 Apr 2019
High15 Apr 2019
Wipro (India)
Technology · Records not stated
Phishing campaign compromised Wipro employees, used to target Wipro customers
15 Apr 2019
High14 Apr 2019
City of Stratford (ON)
Government · Records not stated
Ransomware attack cost city $75K in Bitcoin
14 Apr 2019
Medium14 Apr 2019
City of Stratford (Ontario)
Government · Records not stated
Ransomware attack encrypted city systems, $75,000 ransom paid in Bitcoin
14 Apr 2019
High9 Apr 2019
DataCamp
Retail · 760,561 records
760,561 records exposed, Email addresses, Geographic locations, IP addresses, Names and 1 more
9 Apr 2019
High8 Apr 2019
Knuddels
Technology · 808,330 records
808,330 records exposed, Email addresses, Geographic locations, Names, Passwords and 1 more
8 Apr 2019
High4 Apr 2019
Demon Forums
Retail · 52,623 records
52,623 records exposed, Email addresses, Passwords, Usernames
4 Apr 2019
High3 Apr 2019
Everybody Edits
Technology · 871,190 records
871,190 records exposed, Email addresses, IP addresses, Usernames
3 Apr 2019
Critical27 Mar 2019
Whitepages
Retail · 11,657,763 records
11,657,763 records exposed, Email addresses, Names, Passwords
27 Mar 2019
Critical25 Mar 2019
500px
Retail · 14,867,999 records
14,867,999 records exposed, Dates of birth, Email addresses, Genders, Geographic locations and 3 more
25 Mar 2019
Critical25 Mar 2019
ASUS (Taiwan)
Technology · Records not stated
ShadowPad supply chain attack compromised ASUS Live Update, 1M+ devices affected
25 Mar 2019
Critical22 Mar 2019
Bookmate
Retail · 3,830,916 records
3,830,916 records exposed, Dates of birth, Email addresses, Genders, Geographic locations and 3 more
22 Mar 2019
Critical21 Mar 2019
HauteLook
Retail · 28,510,459 records
28,510,459 records exposed, Dates of birth, Email addresses, Genders, Geographic locations and 2 more
21 Mar 2019
Critical21 Mar 2019
8fit
Healthcare · 15,025,407 records
15,025,407 records exposed, Email addresses, Genders, Geographic locations, IP addresses and 2 more
21 Mar 2019
Critical19 Mar 2019
Norsk Hydro (Norway)
Sector not stated · Records not stated
LockerGoga ransomware disrupted global operations, $70M estimated damage
19 Mar 2019
Critical17 Mar 2019
ixigo
Retail · 17,204,697 records
17,204,697 records exposed, Auth tokens, Device information, Email addresses, Genders and 6 more
17 Mar 2019
High16 Mar 2019
Bukalapak (Indonesia)
Retail · 13,000,000 records
13M user records stolen from Indonesian marketplace, sold on dark web
16 Mar 2019
Critical12 Mar 2019
Houzz
Technology · 48,881,308 records
48,881,308 records exposed, Email addresses, Geographic locations, IP addresses, Names and 3 more
12 Mar 2019
Critical9 Mar 2019
Verifications.io
Retail · 763,117,241 records
763,117,241 records exposed, Dates of birth, Email addresses, Employers, Genders and 6 more
9 Mar 2019
Critical3 Mar 2019
ShareThis
Retail · 40,960,499 records
40,960,499 records exposed, Dates of birth, Email addresses, Names, Passwords
3 Mar 2019
Critical25 Feb 2019
Dubsmash
Retail · 161,749,950 records
161,749,950 records exposed, Email addresses, Geographic locations, Names, Passwords and 3 more
25 Feb 2019
Were you affected?