Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,314
Disclosures in the tracker, all years
2,028
Of those, indexed in 2026
76
Added in October
22
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 20 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

69 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Netherlands7 Oct 2026Jeppesen ForeFlightThe source does not say how they got in.Krebs on Security
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised through anomalies detected in on-premises Microsoft servers, SharePoint vulnerabilities suspected
1 Aug 2026
Critical1 Aug 2026
Police National Legal Database
Government · Records not stated
ExfilSquad stole 135,000 contact records and leaked on dark web
1 Aug 2026
Critical1 Aug 2026
Madera Community Hospital
Healthcare · 150,000 records
Extortion group stole personal, financial, and medical information of 150,000 patients
1 Aug 2026
High1 Aug 2026
SK Telecom
Technology · Records not stated
Massive data leak with compensation ordered at $67 per user by Korea's consumer agency
1 Aug 2026
High1 Aug 2026
Yearslong data breach of residents' private health-related information
Government · Records not stated
Yearslong data breach of residents' private health-related information
1 Aug 2026
High1 Aug 2026
Nissan
Sector not stated · Records not stated
SSNs and banking data stolen via Oracle zero-day
1 Aug 2026
High1 Aug 2026
FirstClass
Sector not stated · Records not stated
Australian travel agency customer records allegedly compromised in data breach
1 Aug 2026
Critical1 Aug 2026
Marquis Software Solutions
Finance · Records not stated
Ransomware attack exposes 788,000 financial records and sensitive customer data including names, addresses, card numbers
1 Aug 2026
Critical1 Aug 2026
Nayax Ltd
Finance · Records not stated
100TB claimed stolen in ransomware attack
1 Aug 2026
High1 Aug 2026
Law Firm (unnamed)
Legal · 13,000 records
Breached law firm exposed hospital records for nearly 13,000 patients in New Jersey
1 Aug 2026
Critical1 Aug 2026
Healthcare billing company breach
Healthcare · 1,260,000 records
Healthcare billing company breach exposed sensitive data affecting 1.26 million people
1 Aug 2026
High1 Aug 2026
Synnovis/Mid South Essex NHS
Healthcare · 900,000 records
Major ransomware attack stole thousands of NHS patient records from Essex healthcare trust
1 Aug 2026
High1 Aug 2026
Ericsson
Technology · 15,661 records
Voice phishing attack exposed data of 15,661 people including SSNs and medical records
1 Aug 2026
High1 Aug 2026
EY Global Advisory
Finance · Records not stated
Personal records acquired in unauthorized access
1 Aug 2026
Critical1 Aug 2026
KDDI Telco Group
Technology · 12,000,000 records
12M email credentials exposed across six ISPs
1 Aug 2026
Critical1 Aug 2026
30M patient records stolen including 1M SSNs
Healthcare · 30,000,000 records
30M patient records stolen including 1M SSNs
1 Aug 2026
High1 Aug 2026
Synnovis/Essex NHS
Healthcare · 900,000 records
Ransomware attack stole thousands of patient records held by NHS trust in Essex; disclosed over 6 months after notification
1 Aug 2026
High1 Aug 2026
U.S. Civil Service Agencies
Government · Records not stated
Thousands of civil servants' passwords exposed since early 2024, including White House linked credentials
1 Aug 2026
High1 Aug 2026
Multiple Gaming Platforms
Technology · Records not stated
Over 11 million gaming account credentials exposed in 2024 data leaks
1 Aug 2026
Critical1 Aug 2026
US Homeland Security
Government · Records not stated
HSIN government network breached during World Cup
1 Aug 2026
High1 Aug 2026
Cherry Creek School District
Education · Records not stated
Student data breached; district notified families and facing lawsuit
1 Aug 2026
High1 Aug 2026
Personal information
Retail · Records not stated
Personal information exposed in data security incident; $40M settlement reached
1 Aug 2026
High1 Aug 2026
KT Corporation
Technology · Records not stated
Customer data breach affecting multiple individuals in South Korea telecommunications
1 Aug 2026
Critical1 Aug 2026
DentaQuest
Healthcare · Records not stated
23M dental health records exposed
1 Aug 2026
Were you affected?