Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,337
Disclosures in the tracker, all years
2,050
Of those, indexed in 2026
104
Added in October
24
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 24 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

74 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Japan22 Oct 2026CapcomThe source does not say how they got in.BleepingComputer
  2. Japan19 Oct 2026Nikkei Inc.How they got in: stolen or reused passwords.BleepingComputer
  3. Japan16 Oct 2026Burger King JapanThe source does not say how they got in.Security Affairs
  4. Japan16 Oct 2026BK JapanThe source does not say how they got in.SecurityWeek
  5. Japan16 Oct 2026Al Jazeera Media NetworkHow they got in: a supplier or vendor that was compromised first.BleepingComputer
High9 Jul 2026
Liberty Mutual Insurance
Finance · Records not stated
108GB policyholder and financial records exfiltrated
9 Jul 2026
High9 Jul 2026
French Tchap Platform
Government · Records not stated
73K government accounts and 643K messages stolen
9 Jul 2026
High9 Jul 2026
VIQ Solutions
Legal · Records not stated
Court transcripts stolen via rogue subcontractor
9 Jul 2026
Critical9 Jul 2026
Charter Communications Spectrum
Technology · 40,000,000 records
40M customer records stolen via vishing attack
9 Jul 2026
Critical9 Jul 2026
Credential Dump Global
Technology · Records not stated
24B stolen credentials exposed in public database
9 Jul 2026
Critical9 Jul 2026
One Medical Senior Care
Healthcare · Records not stated
Archived elderly patient clinical records breached
9 Jul 2026
Critical9 Jul 2026
Navia Benefits
Finance · Records not stated
2.7M SSNs and benefits enrollment records exposed
9 Jul 2026
High9 Jul 2026
Basic-Fit
Retail · Records not stated
1M members' bank and PII data breached
9 Jul 2026
Critical9 Jul 2026
NYC Health + Hospitals
Healthcare · 1,800,000 records
1.8M records stolen including biometrics
9 Jul 2026
Critical9 Jul 2026
Texas Parks Wildlife Dept
Government · Records not stated
3M license holders PII exposed via vendor breach
9 Jul 2026
Critical9 Jul 2026
Charter Communications
Technology · 40,000,000 records
40M customer records exfiltrated by ShinyHunters
9 Jul 2026
Critical9 Jul 2026
AdaptHealth Corp
Healthcare · Records not stated
Patient PHI and billing credentials accessed
9 Jul 2026
Critical9 Jul 2026
Canada House of Commons
Government · Records not stated
Employee PII stolen via Microsoft SharePoint zero-day
9 Jul 2026
High9 Jul 2026
Nissan North America
Sector not stated · Records not stated
Employee SSNs stolen via Oracle PeopleSoft flaw
9 Jul 2026
Critical9 Jul 2026
700Credit
Finance · Records not stated
5.8M automotive finance SSNs stolen via API
9 Jul 2026
Critical9 Jul 2026
US DHS HSIN
Government · Records not stated
Federal threat intel platform breached for weeks
9 Jul 2026
Critical9 Jul 2026
Global Credential Mega-Dump
Technology · 24,000,000,000 records
24B credential records from 36 infostealer sources
9 Jul 2026
Critical9 Jul 2026
Instructure Canvas
Education · 275,000,000 records
275M records across 9K institutions stolen
9 Jul 2026
Critical9 Jul 2026
Oracle PeopleSoft CVE-2026-35273
Technology · 3,000,000 records
300+ instances hit, 100+ orgs, HR/payroll data stolen
9 Jul 2026
Critical9 Jul 2026
Klue Supply Chain Breach
Technology · Records not stated
200 firms hit via stolen OAuth tokens and CRM keys
9 Jul 2026
Critical9 Jul 2026
24B credential records from 36 breach sources exposed
Sector not stated · 24,000,000,000 records
24B credential records from 36 breach sources exposed
9 Jul 2026
Critical9 Jul 2026
World Cup security planning data
Government · Records not stated
World Cup security planning data exposed via HSIN
9 Jul 2026
High9 Jul 2026
Chemco Canada
Sector not stated · Records not stated
Ransomware attack by Qilin group ongoing
9 Jul 2026
Medium9 Jul 2026
Chisholm Persson Ball Law
Legal · Records not stated
Akira ransomware attack on US law firm
9 Jul 2026
Were you affected?