Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,324
Disclosures in the tracker, all years
2,039
Of those, indexed in 2026
95
Added in October
22
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 23 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

71 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. New Zealand20 Oct 2026Crime Stoppers Guelph WellingtonThe source does not say how they got in.CTV News
High1 Oct 2026
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Customer personal information in the More Rewards loyalty database was stolen; confirmed by Pattison Food Group on Oct 16, affecting four chains.
1 Oct 2026
High1 Oct 2026
Gainwell Technologies
Healthcare · Records not stated
Kentucky Medicaid provider-portal breach; third Gainwell provider-portal incident in 2026 using the same attack vector.
1 Oct 2026
Critical1 Oct 2026
Labcorp
Healthcare · Records not stated
Labcorp agreed to a $2.3M settlement with 44 state attorneys general over a debt collector data breach exposing patient information.
1 Oct 2026
High1 Oct 2026
Zizzl LLC
Sector not stated · Records not stated
Zizzl LLC confirmed in state notification filings a data breach exposing 519 Social Security numbers.
1 Oct 2026
Critical1 Oct 2026
Canadian Crime Stoppers
Sector not stated · Records not stated
CBC investigation confirmed over 1.5 million tips sent to Canadian Crime Stoppers chapters were captured and leaked in a hack.
1 Oct 2026
High1 Oct 2026
Organisation not named
Healthcare · 5,461 records
The disclosure as indexed does not name the organisation.
Data breach affected 5,461 patients, exposing sensitive health information.
1 Oct 2026
High1 Oct 2026
Zizzl LLC
Sector not stated · Records not stated
Breach exposed 519 Social Security numbers, confirmed in official state notification filings.
1 Oct 2026
High1 Oct 2026
Pattison Food Group (Save-On-Foods)
Retail · Records not stated
Confirmed customer personal information in the More Rewards loyalty database was exposed.
1 Oct 2026
Critical1 Oct 2026
Organisation not named
Education · Records not stated
The disclosure as indexed does not name the organisation.
Sensitive data of millions of California students stolen in a breach at contractor Educational Testing Service.
1 Oct 2026
High1 Oct 2026
Houston-area school district (unnamed)
Education · 38,000 records
Data breach exposed personal information of roughly 38,000 people, per local reporting.
1 Oct 2026
High1 Oct 2026
Organisation not named
Education · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack on the medical school resulted in theft of some information; the university confirmed the incident.
1 Oct 2026
High1 Oct 2026
Organisation not named
Finance · 3,897 records
The disclosure as indexed does not name the organisation.
Cyber incident led to theft of 3,897 customer records, which were posted on the dark web; SBI disclosed it to stock exchanges.
1 Oct 2026
High1 Oct 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Personal and billing information of 3,816 Kentucky Medicaid recipients was exposed for months before being disclosed.
1 Oct 2026
High1 Oct 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Utility account data of roughly 400,000 Georgia Power and Alabama Power customers was breached; customers are being notified.
1 Oct 2026
High1 Oct 2026
Organisation not named
Education · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack resulted in theft of some information from the college of medicine.
1 Oct 2026
High1 Oct 2026
Alternative für Deutschland (AfD)
Sector not stated · 420,000 records
Leak of about 420,000 emails, bank statements and membership records of the political party.
1 Oct 2026
High1 Oct 2026
ASOS
Retail · Records not stated
Hackers took more personal details than first revealed, going beyond basic contact details, per a BBC investigation. The retailer issued an update.
1 Oct 2026
Critical1 Oct 2026
Times Car
Technology · 6,600,000 records
6.6 million user accounts compromised in cyberattack exposing personal information
1 Oct 2026
High1 Oct 2026
FLHSMV
Government · Records not stated
FLHSMV confirmed a Florida DMV breach traced to one officer's personal device; ShinyHunters claims 200,000 driver records were stolen.
1 Oct 2026
High1 Oct 2026
Pattison Food Group
Retail · Records not stated
Customer personal information in the More Rewards loyalty database was exposed across four chains; Pattison confirmed the breach on October 16.
1 Oct 2026
Critical1 Oct 2026
Contractor ETS
Education · Records not stated
Contractor ETS suffered a breach exposing sensitive data of millions of California students; the California Department of Education notified students.
1 Oct 2026
High1 Oct 2026
Meta
Technology · Records not stated
Hackers breached Meta GitHub repositories using stolen credentials, taking source code and personal data of about 1,500 employees; Meta confirmed.
1 Oct 2026
High1 Oct 2026
Pattison Food Group (Save-On-Foods)
Retail · Records not stated
Confirmed customer personal information stored in the More Rewards loyalty database was exposed.
1 Oct 2026
High1 Oct 2026
Meta
Technology · 1,500 records
Hackers stole source code and employee personal data (about 1,500 people) after breaching Meta GitHub repositories using stolen credentials.
1 Oct 2026
Were you affected?