Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,292
Disclosures in the tracker, all years
2,005
Of those, indexed in 2026
50
Added in October
9
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 18 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

64 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. South Korea10 Oct 2026South Korean banksHow they got in: automated AI tools that work through many organizations at once.BleepingComputer
  2. South Korea8 Oct 2026Uranium FinanceHow they got in: a known flaw in software the victim ran.BleepingComputer
  3. South Korea7 Oct 2026Exposed AI server operatorsHow they got in: a system left reachable from the internet.BleepingComputer
  4. South Korea7 Oct 2026SpotifyThe source does not say how they got in.BleepingComputer
  5. South Korea7 Oct 2026GoogleHow they got in: a supplier or vendor that was compromised first.BleepingComputer
  6. South Korea7 Oct 2026Fortinet FortiGate firewall ownersHow they got in: stolen or reused passwords.BleepingComputer
  7. South Korea7 Oct 2026MonsterCloud customersThe source does not say how they got in.BleepingComputer
High16 Sep 2026
Dartmouth College
Education · Records not stated
Data breach after Clop extortion attack
16 Sep 2026
High16 Sep 2026
Cisco
Technology · Records not stated
Data breach impacting Cisco.com user accounts
16 Sep 2026
Critical16 Sep 2026
Conduent
Healthcare · Records not stated
Ransomware breach stealing 8TB of files from document processing company affecting healthcare sector
16 Sep 2026
Critical16 Sep 2026
FinWise Bank
Finance · 689,000 records
Insider data breach affecting 689,000 customers' personal information
16 Sep 2026
Critical16 Sep 2026
Rockstar Games
Technology · Records not stated
Data breach through Snowflake platform via Anodot access compromise
16 Sep 2026
Critical16 Sep 2026
Ticketmaster
Technology · 560,000,000 records
Data breach through Snowflake platform, part of 165-company attack campaign
16 Sep 2026
High16 Sep 2026
Kirkland & Ellis
Legal · Records not stated
Law firm affected by MOVEit Transfer data breach
16 Sep 2026
Critical16 Sep 2026
Welltok
Healthcare · 14,760,000 records
MOVEit Transfer breach affecting 14.76 million individuals in healthcare/patient data
16 Sep 2026
High16 Sep 2026
Sax
Sector not stated · Records not stated
2024 data breach disclosed in December 2025
16 Sep 2026
High16 Sep 2026
TransUnion
Finance · 37,000 records
37,000 people affected, exposing credit and personal data in 2019 breach
16 Sep 2026
Critical16 Sep 2026
French Telco Subsidiaries
Technology · 24,000,000 records
Cybersecurity vulnerabilities contributed to breach of 24 million customer records
16 Sep 2026
Critical16 Sep 2026
AT&T
Technology · 109,000,000 records
Data breach exposed over 100 million customers across two separate incidents
16 Sep 2026
High16 Sep 2026
University of Western Australia
Education · Records not stated
Accidental data leak of student records; second breach in six months
16 Sep 2026
Critical16 Sep 2026
UC Berkeley Canvas
Education · 600,000 records
Cybercrime group claimed 600K records stolen from learning management platform bCourses
16 Sep 2026
Critical16 Sep 2026
Marquis Software Solutions
Finance · Records not stated
Ransomware attack exposed 788,000 financial records from banks and credit union customers
16 Sep 2026
High16 Sep 2026
ADT
Sector not stated · 30,814 records
Data breach exposed customer PII; class action lawsuit filed against home security provider
16 Sep 2026
Critical16 Sep 2026
Bankinter/EVO Banco
Finance · 1,270,000 records
2024 API vulnerability exposed financial and identity data of 1.27 million people in Spain
16 Sep 2026
Medium15 Sep 2026
Houston-based CenterPoint Energy
Government · Records not stated
Houston-based CenterPoint Energy notified federal regulators about an incident that exposed some customer data on the dark web.
15 Sep 2026
Medium15 Sep 2026
CenterPoint Energy
Sector not stated · Records not stated
CenterPoint Energy disclosed a breach compromising some customers' personal information after an attacker leaked data allegedly stolen from the utility company.
15 Sep 2026
High15 Sep 2026
Woodfords Family Services
Healthcare · Records not stated
2024 ransomware attack affecting patients and families
15 Sep 2026
Critical15 Sep 2026
T-Mobile
Technology · 64,000,000 records
Over 64 million records leaked online by hackers
15 Sep 2026
Critical15 Sep 2026
Free Mobile and Free
Technology · Records not stated
Major data theft in France, resulted in €49 million fine from CNIL
15 Sep 2026
High15 Sep 2026
DocketWise
Legal · 143,000 records
Data breach impacted 143,000 individuals
15 Sep 2026
High15 Sep 2026
Estée Lauder
Retail · Records not stated
Data breach from Oracle EBS zero-day hack disclosed
15 Sep 2026
Were you affected?