Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,291
Disclosures in the tracker, all years
2,004
Of those, indexed in 2026
49
Added in October
9
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 17 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

64 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. South Korea10 Oct 2026South Korean banksHow they got in: automated AI tools that work through many organizations at once.BleepingComputer
  2. South Korea8 Oct 2026Uranium FinanceHow they got in: a known flaw in software the victim ran.BleepingComputer
  3. South Korea7 Oct 2026Exposed AI server operatorsHow they got in: a system left reachable from the internet.BleepingComputer
  4. South Korea7 Oct 2026SpotifyThe source does not say how they got in.BleepingComputer
  5. South Korea7 Oct 2026GoogleHow they got in: a supplier or vendor that was compromised first.BleepingComputer
  6. South Korea7 Oct 2026Fortinet FortiGate firewall ownersHow they got in: stolen or reused passwords.BleepingComputer
  7. South Korea7 Oct 2026MonsterCloud customersThe source does not say how they got in.BleepingComputer
Critical18 Sep 2026
Allianz Life
Finance · 1,500,000 records
1.5 million individuals impacted by data breach
18 Sep 2026
High18 Sep 2026
DocketWise
Legal · 143,000 records
143,000 individuals impacted by data breach
18 Sep 2026
Critical18 Sep 2026
Columbia University
Education · 860,000 records
860,000 individuals impacted by data breach
18 Sep 2026
Critical18 Sep 2026
McLaren Health Care
Healthcare · Records not stated
740,000+ records stolen in ransomware attack
18 Sep 2026
Critical18 Sep 2026
MGM
Sector not stated · Records not stated
2019 data breach affecting customers, $45M settlement paid
18 Sep 2026
High18 Sep 2026
Workday
Technology · Records not stated
Social engineering attack targeting CRM exposed customer data
18 Sep 2026
High18 Sep 2026
Union Bank and Trust
Finance · Records not stated
2023 MOVEit software exploit exposed customer data; $2.4M settlement
18 Sep 2026
Critical18 Sep 2026
Welltok
Healthcare · 14,760,000 records
14.76 million individuals affected by MOVEit Transfer data breach in 2023
18 Sep 2026
High18 Sep 2026
Mizuno
Retail · Records not stated
Data breach confirmed after 2024 ransomware attack affecting customer data
18 Sep 2026
Critical18 Sep 2026
Free Mobile
Technology · 24,000,000 records
2024 data breach affecting 24 million customers; fined €42 million by French regulator for security violations
18 Sep 2026
Critical18 Sep 2026
U.S. Federal Agencies
Government · Records not stated
Thousands of civil servants' passwords exposed since early 2024, including compromised White House credentials
18 Sep 2026
Critical18 Sep 2026
MCBS
Healthcare · 1,200,000 records
Atlanta-based medical business management company data breach affecting 1.2 million individuals
18 Sep 2026
High18 Sep 2026
Highland Oncology Group
Healthcare · Records not stated
2025 ransomware attack on Arkansas-based cancer care practice, litigation settled
18 Sep 2026
Critical18 Sep 2026
Kinryū Labs Database
Sector not stated · Records not stated
Misconfigured APIS database exposed 220 million traveler records including passenger, crew and passport details
18 Sep 2026
Critical18 Sep 2026
AT&T
Technology · 109,000,000 records
Two separate 2024 incidents exposed data from over 100 million customers
18 Sep 2026
Critical18 Sep 2026
Trizetto Provider Solutions
Healthcare · 3,400,000 records
Unauthorized IT environment access exposed PHI of 3.4 million individuals
18 Sep 2026
Critical18 Sep 2026
T-Mobile
Technology · 76,600,000 records
2021 cyberattack exposed data of 76.6 million people including SSNs and driver's licenses
18 Sep 2026
Critical18 Sep 2026
EVO Banco
Finance · 1,270,000 records
API vulnerability exposed financial and identity data of 1.27 million people in Spain
18 Sep 2026
Medium18 Sep 2026
International Meteor Organization
Sector not stated · Records not stated
Jonathan Greig reports: A cyberattack has shut down the website of the premier international organization responsible for tracking meteors. The International Meteor Organization (IMO) has continued tracking asteroids…
18 Sep 2026
Medium17 Sep 2026
ThreatsDay
Retail · Records not stated
Attackers keep finding new keys. The funny part is that defenders keep inventing where to store them. This week, those keys sit in AI tools, exposed services, old bugs, weak logins, and software sold like a monthly…
17 Sep 2026
Medium17 Sep 2026
OpenAI
Finance · Records not stated
OpenAI has published six new reports detailing AI model misalignment, including instances of hidden instructions, unauthorized communication, and attempts to locate exposed API keys, adding to the evidence that its AI…
17 Sep 2026
Critical17 Sep 2026
DISA Global Solutions
Sector not stated · 3,300,000 records
3.3 million people affected by 2024 data breach
17 Sep 2026
High17 Sep 2026
Truist Bank
Finance · Records not stated
Data breach; bank sued over incident
17 Sep 2026
Critical17 Sep 2026
T-Mobile
Technology · 64,000,000 records
Over 64 million records leaked online
17 Sep 2026
Were you affected?