Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,306
Disclosures in the tracker, all years
2,020
Of those, indexed in 2026
69
Added in October
19
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 20 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

68 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Netherlands7 Oct 2026Jeppesen ForeFlightThe source does not say how they got in.Krebs on Security
High1 Aug 2026
Ransomware attack with data deletion
Finance · Records not stated
Ransomware attack with data deletion confirmation from hacker gang
1 Aug 2026
High1 Aug 2026
New Jersey Law Firm
Legal · 13,000 records
Cyberattack exposed hospital records of nearly 13,000 patients to hackers
1 Aug 2026
Critical1 Aug 2026
Ceva Logistics
Sector not stated · Records not stated
Data breach exposed personal data from multiple companies relying on Ceva for shipping, affecting banks, retailers, and Steam gamers
1 Aug 2026
High1 Aug 2026
Klaviyo
Technology · Records not stated
Marketing tech platform inadvertently shared sign-up information including passwords to dozens of advertisers
1 Aug 2026
Critical1 Aug 2026
Thailand Digital Ministry
Government · Records not stated
221 million exposed login records from state systems
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
UK police, government and customer contact details compromised and exposed on dark web
1 Aug 2026
Critical1 Aug 2026
MCBS Medical Billing
Healthcare · 1,260,000 records
1.26 million patients exposed in PEAR ransomware attack on billing and practice-management company
1 Aug 2026
High1 Aug 2026
Law firm (New Jersey)
Legal · 13,000 records
Cyberattack exposing hospital records and personal information on nearly 13,000 patients
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records of police and government exposed on dark web by ExfilSquad
1 Aug 2026
High1 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack; hackers deleted stolen data after extortion demands
1 Aug 2026
High1 Aug 2026
Data breach
Healthcare · Records not stated
Data breach exposed SSNs and medical records
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records including police and government details leaked on dark web
1 Aug 2026
High1 Aug 2026
T-Mobile
Technology · Records not stated
Data breach exposed customer information; company violated WA notification law using text messages
1 Aug 2026
High1 Aug 2026
PNLD
Government · Records not stated
Police National Legal Database exposed U.K. police and government contact details on dark web
1 Aug 2026
Critical1 Aug 2026
MCBS
Healthcare · 1,260,000 records
1.26 million patients exposed in PEAR ransomware attack on medical billing company
1 Aug 2026
Critical1 Aug 2026
Coldcard/Coinkite
Finance · Records not stated
Bitcoin hardware wallet breach; over $100M worth of bitcoin stolen
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records stolen and leaked on dark web; police and government data exposed
1 Aug 2026
High1 Aug 2026
Clover Health
Healthcare · Records not stated
Data breach disclosed in securities filing; type of data exposed and record count unknown
1 Aug 2026
High1 Aug 2026
Chick-fil-A
Retail · Records not stated
Hackers accessed customer loyalty accounts using stolen usernames and passwords; names, emails exposed
1 Aug 2026
High1 Aug 2026
135,000 contact records stolen, published on dark web
Government · Records not stated
135,000 contact records stolen, published on dark web
1 Aug 2026
Critical1 Aug 2026
Instructure Canvas
Education · 275,000,000 records
ShinyHunters breach exposed 275 million records from 8,809 schools
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records stolen, data published on dark web
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Police, government and customer contact data leaked on dark web including names and emails
1 Aug 2026
High1 Aug 2026
Bol.com
Retail · Records not stated
Third-party warehousing logistics partner hacked, disrupting retailer operations
1 Aug 2026
Were you affected?