Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,302
Disclosures in the tracker, all years
2,017
Of those, indexed in 2026
68
Added in October
18
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 20 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

65 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. South Korea10 Oct 2026South Korean banksHow they got in: automated AI tools that work through many organizations at once.BleepingComputer
  2. South Korea8 Oct 2026Uranium FinanceHow they got in: a known flaw in software the victim ran.BleepingComputer
  3. South Korea7 Oct 2026Exposed AI server operatorsHow they got in: a system left reachable from the internet.BleepingComputer
  4. South Korea7 Oct 2026SpotifyThe source does not say how they got in.BleepingComputer
  5. South Korea7 Oct 2026GoogleHow they got in: a supplier or vendor that was compromised first.BleepingComputer
  6. South Korea7 Oct 2026Fortinet FortiGate firewall ownersHow they got in: stolen or reused passwords.BleepingComputer
  7. South Korea7 Oct 2026MonsterCloud customersThe source does not say how they got in.BleepingComputer
Critical13 Aug 2026
U.S. Federal Government
Government · Records not stated
Thousands of civil servants' passwords exposed since early 2024, including compromised White House-linked credentials
13 Aug 2026
High13 Aug 2026
CareCloud
Healthcare · 345,000 records
Cyberattack exposed data of 345,000 patients from EHR and RCM provider
13 Aug 2026
Critical13 Aug 2026
100K+ officers and staff records exposed
Government · Records not stated
100K+ officers and staff records exposed
13 Aug 2026
High13 Aug 2026
Preferred Financial Services
Finance · Records not stated
Play ransomware breach, financial PII exposed
13 Aug 2026
High13 Aug 2026
RingCentral
Technology · 1,596,490 records
1,596,490 records exposed, Email addresses, Names, Phone numbers, Physical addresses
13 Aug 2026
Critical13 Aug 2026
Marianne Kolbasuk McGee
Healthcare · Records not stated
Marianne Kolbasuk McGee reports: A Canadian hospital is dealing with a ransomware attack on its facility management systems that has affected the building’s doors and heating, ventilation and air conditioning…
13 Aug 2026
Critical13 Aug 2026
100K+ police and government contacts leaked
Government · Records not stated
100K+ police and government contacts leaked
13 Aug 2026
Critical13 Aug 2026
Snowflake Breach Victims
Technology · 165,000,000 records
Billions of records stolen across 165 organizations
13 Aug 2026
Critical13 Aug 2026
One Medical
Healthcare · Records not stated
8.8TB stolen from legacy systems by ShinyHunters
13 Aug 2026
Critical13 Aug 2026
Morguard
Finance · Records not stated
Data exfiltration threatened by Helix ransomware
13 Aug 2026
Critical13 Aug 2026
Exposed Elasticsearch Database
Sector not stated · Records not stated
24B stolen credentials publicly exposed
13 Aug 2026
Critical13 Aug 2026
100K+ police officer contact records exposed
Government · Records not stated
100K+ police officer contact records exposed
13 Aug 2026
Critical13 Aug 2026
UK Department for Education
Education · 500,000 records
500K+ records exposed in ExfilSquad attack
13 Aug 2026
Critical13 Aug 2026
135K law enforcement records leaked on dark web
Government · Records not stated
135K law enforcement records leaked on dark web
13 Aug 2026
High13 Aug 2026
AssetMark
Finance · 570,000 records
570K individuals exposed in May intrusion
13 Aug 2026
Critical13 Aug 2026
135K law enforcement contact records exfiltrated
Government · Records not stated
135K law enforcement contact records exfiltrated
13 Aug 2026
Critical13 Aug 2026
100K+ officers' contact data stolen
Government · Records not stated
100K+ officers' contact data stolen
13 Aug 2026
Medium12 Aug 2026
CEVA Logistics
Sector not stated · Records not stated
CEVA Logistics suffered a cyberattack disrupting European operations, with eight warehouses affected and shipments halted at impacted sites. CEVA Logistics suffered a cyberattack on July 29 that disrupted parts of its…
12 Aug 2026
Critical12 Aug 2026
Navia Benefit Solutions
Healthcare · Records not stated
2.7M SSNs and health plan data stolen
12 Aug 2026
Critical12 Aug 2026
Global Credential Elasticsearch Dump
Sector not stated · Records not stated
24B stolen credentials publicly exposed online
12 Aug 2026
Critical12 Aug 2026
100K+ officer records leaked on dark web
Government · Records not stated
100K+ officer records leaked on dark web
12 Aug 2026
Critical12 Aug 2026
MCBS Medical
Healthcare · 1,260,000 records
Medical billing company breach exposed 1.26 million patients in PEAR ransomware attack
12 Aug 2026
Critical12 Aug 2026
MCBS
Healthcare · 1,200,000 records
Medical business management company suffered breach affecting 1.2 million individuals' data
12 Aug 2026
Critical12 Aug 2026
Navia Benefits
Healthcare · Records not stated
2.7M SSNs and benefits records stolen
12 Aug 2026
Were you affected?