Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,302
Disclosures in the tracker, all years
2,017
Of those, indexed in 2026
68
Added in October
18
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 20 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

65 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. South Korea10 Oct 2026South Korean banksHow they got in: automated AI tools that work through many organizations at once.BleepingComputer
  2. South Korea8 Oct 2026Uranium FinanceHow they got in: a known flaw in software the victim ran.BleepingComputer
  3. South Korea7 Oct 2026Exposed AI server operatorsHow they got in: a system left reachable from the internet.BleepingComputer
  4. South Korea7 Oct 2026SpotifyThe source does not say how they got in.BleepingComputer
  5. South Korea7 Oct 2026GoogleHow they got in: a supplier or vendor that was compromised first.BleepingComputer
  6. South Korea7 Oct 2026Fortinet FortiGate firewall ownersHow they got in: stolen or reused passwords.BleepingComputer
  7. South Korea7 Oct 2026MonsterCloud customersThe source does not say how they got in.BleepingComputer
Critical12 Aug 2026
100K+ officer records and PII exposed
Government · Records not stated
100K+ officer records and PII exposed
12 Aug 2026
Critical12 Aug 2026
Rockstar Games
Technology · Records not stated
Breached through Anodot's Snowflake access; part of ShinyHunters 165-organization attack
12 Aug 2026
Critical12 Aug 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
Healthcare billing company; 1.26 million patients exposed in PEAR ransomware attack
12 Aug 2026
Critical12 Aug 2026
Basic-Fit
Retail · Records not stated
1M members bank details downloaded
12 Aug 2026
Critical12 Aug 2026
Philadelphia Insurance Companies
Finance · Records not stated
Customer and policy data exposed in ransomware attack
12 Aug 2026
Critical12 Aug 2026
NYC Health and Hospitals
Healthcare · 1,800,000 records
1.8M patient records and biometric data stolen
12 Aug 2026
Critical12 Aug 2026
100K police officer records exposed
Government · Records not stated
100K police officer records exposed
12 Aug 2026
Critical12 Aug 2026
100K+ officers and staff PII exposed
Government · Records not stated
100K+ officers and staff PII exposed
12 Aug 2026
Critical12 Aug 2026
Snowflake Breach Network
Technology · 165,000,000 records
165 orgs compromised, billions of records stolen
12 Aug 2026
Critical12 Aug 2026
Credential Elasticsearch Dump
Technology · Records not stated
24B stolen credential records publicly exposed
12 Aug 2026
Critical12 Aug 2026
100K+ police officers and staff records exposed
Government · Records not stated
100K+ police officers and staff records exposed
12 Aug 2026
High12 Aug 2026
Polish Energy Plant
Government · Records not stated
Heat-and-power facility breached via private APN, supplies heat to ~50,000 residents
12 Aug 2026
Critical12 Aug 2026
100K+ officer and staff identities exposed
Government · Records not stated
100K+ officer and staff identities exposed
12 Aug 2026
High12 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Heat-and-power facility breached via private APN, serves ~50,000 residents
12 Aug 2026
High12 Aug 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Thousands of patient records stolen during major ransomware attack disrupting healthcare
12 Aug 2026
High12 Aug 2026
US Civil Service/Government
Government · Records not stated
Thousands of civil servants passwords exposed since early 2024, including White House linked credentials
12 Aug 2026
Critical12 Aug 2026
Snowflake (165 Victims)
Technology · 165,000,000 records
Billions of records stolen from 165 orgs
12 Aug 2026
Critical12 Aug 2026
Infostealer malware victims (aggregated)
Sector not stated · 24,000,000,000 records
24 billion records including usernames, passwords, and URLs from infostealer malware
12 Aug 2026
Medium12 Aug 2026
BudBoard Cannabis SaaS
Technology · Records not stated
Dispensary data exposed via Firebase misconfiguration
12 Aug 2026
Critical12 Aug 2026
Basic-Fit Gyms
Sector not stated · Records not stated
1M member bank and personal records breached
12 Aug 2026
High12 Aug 2026
Service d'Usinage 9002
Sector not stated · Records not stated
Aerospace and defense firm breached by Qilin
12 Aug 2026
Critical12 Aug 2026
US Homeland Security HSIN
Government · Records not stated
Government threat-sharing network breached
12 Aug 2026
High12 Aug 2026
Preferred Financial
Finance · Records not stated
Financial records stolen by Play ransomware group
12 Aug 2026
Critical12 Aug 2026
Indiana University Health
Healthcare · Records not stated
Patient data exfiltrated by Storm threat actor
12 Aug 2026
Were you affected?