Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,314
Disclosures in the tracker, all years
2,028
Of those, indexed in 2026
76
Added in October
22
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 20 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

69 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. South Korea10 Oct 2026South Korean banksHow they got in: automated AI tools that work through many organizations at once.BleepingComputer
  2. South Korea8 Oct 2026Uranium FinanceHow they got in: a known flaw in software the victim ran.BleepingComputer
  3. South Korea7 Oct 2026Exposed AI server operatorsHow they got in: a system left reachable from the internet.BleepingComputer
  4. South Korea7 Oct 2026SpotifyThe source does not say how they got in.BleepingComputer
  5. South Korea7 Oct 2026GoogleHow they got in: a supplier or vendor that was compromised first.BleepingComputer
  6. South Korea7 Oct 2026Fortinet FortiGate firewall ownersHow they got in: stolen or reused passwords.BleepingComputer
  7. South Korea7 Oct 2026MonsterCloud customersThe source does not say how they got in.BleepingComputer
Critical8 Aug 2026
Snowflake via Connor Moucka
Technology · 165,000,000 records
Billions of records across 165 organizations stolen
8 Aug 2026
High8 Aug 2026
Pathstone Private Office
Finance · Records not stated
641K sensitive financial records stolen
8 Aug 2026
High8 Aug 2026
135K law enforcement contacts leaked dark web
Government · Records not stated
135K law enforcement contacts leaked dark web
8 Aug 2026
Critical8 Aug 2026
Amgen Pharmaceuticals
Healthcare · Records not stated
Patient and corporate data stolen from cloud systems
8 Aug 2026
Critical8 Aug 2026
100K+ officer and justice staff records leaked
Government · Records not stated
100K+ officer and justice staff records leaked
8 Aug 2026
High7 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
A recent wave of cyber attacks targeting financial services, private equity, and professional services has been attributed to a data extortion group known as UNC6671. "UNC6671 continues to rely on voice phishing…
7 Aug 2026
Critical7 Aug 2026
City of Coweta
Government · Records not stated
KTUL in Oklahoma reports: The City of Coweta says they are currently responding to a ransomware attack. According to officials, on Werdnesday, August 5, the City experienced at system-wide attack and immediately…
7 Aug 2026
High7 Aug 2026
Levi Strauss & Co.
Retail · Records not stated
Hackers used social engineering to steal corporate data from three employees
7 Aug 2026
High7 Aug 2026
Swiss Federal Government (BIT/FOITT)
Government · Records not stated
Hackers exploited Microsoft SharePoint vulnerabilities to breach servers and compromise 200 accounts
7 Aug 2026
High7 Aug 2026
Coinbase
Finance · Records not stated
Breach involving outsourcer fired HR employees investigating data theft; suspect retained data for 10,000+ customers
7 Aug 2026
Critical7 Aug 2026
Gaming Accounts (Multi-org)
Technology · Records not stated
11+ million gaming account credentials exposed through credential theft and infostealer malware
7 Aug 2026
High7 Aug 2026
Officer PII and justice partner emails
Government · Records not stated
Officer PII and justice partner emails exposed
7 Aug 2026
Medium7 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft attacks, known to impact Framework and Tally.
7 Aug 2026
Critical7 Aug 2026
Snowflake (165 breaches)
Technology · 165,000,000 records
Canadian hacker pleaded guilty to hacking data storage platform; 165 breaches resulted, 100M+ people affected
7 Aug 2026
High7 Aug 2026
Marquis (fintech firm)
Finance · 672,000 records
Ransomware attack stole names, addresses, card numbers and sensitive data affecting 672,000 records
7 Aug 2026
Critical7 Aug 2026
Snowflake (multiple customers)
Technology · 165,000,000 records
165+ breaches resulted from Snowflake hacking conspiracy affecting 100M+ people
7 Aug 2026
High7 Aug 2026
Yearslong data breach
Healthcare · Records not stated
Yearslong data breach exposed residents' private health-related information
7 Aug 2026
Critical7 Aug 2026
TriZetto (duplicate confirmation)
Healthcare · 3,400,000 records
Confirmed year-long hack of network exposed records on 3.4 million people
7 Aug 2026
Critical7 Aug 2026
Blue Cross Blue Shield
Healthcare · Records not stated
Massive data breach affecting health and insurance information; company delayed reporting to regulators
7 Aug 2026
Critical7 Aug 2026
US Civil Service
Government · Records not stated
Thousands of civil servants' passwords exposed since early 2024, including White House-linked credentials
7 Aug 2026
Critical7 Aug 2026
Cyber attack
Government · 607,000 records
Cyber attack exposed approximately 607,000 records
7 Aug 2026
Critical7 Aug 2026
Snowflake (via hacks)
Technology · 165,000,000 records
165 breaches affecting over 100 million people via compromised Snowflake platform; Canadian hacker Connor Riley Moucka pleaded guilty
7 Aug 2026
High7 Aug 2026
TD Bank
Finance · Records not stated
Data security incident affecting customer information, separate newer breach in 2026
7 Aug 2026
Critical7 Aug 2026
Queensland Schools
Education · Records not stated
Major cyber breach affecting tens of thousands of students and teachers via education technology platform
7 Aug 2026
Were you affected?