Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,362
Disclosures in the tracker, all years
2,076
Of those, indexed in 2026
136
Added in October
19
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 28 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Medium9 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
A new data-extortion group called Helix is using identity-focused tactics such as voice phishing (vishing), device code phishing, and multi-factor authentication (MFA) abuse to steal data from SharePoint environments. [.
9 Jul 2026
Critical9 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
A foreign, financially motivated group was responsible for a cyberattack on state-owned forestry company Latvijas Valsts Mezi (LVM), officials said.
9 Jul 2026
Medium9 Jul 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
A cloud intrusion that ended with the deployment of cryptomining malware has exposed a bigger risk for enterprises: AI gateways that concentrate access to cloud identities, permissions, and foundation models in a…
9 Jul 2026
Medium9 Jul 2026
The Japan Times
Government · Records not stated
The Japan Times reports: An 18-year-old man has been arrested for his suspected involvement in a cyberattack on the operator of the Kaikatsu Club internet cafe chain, according to investigative sources. On Wednesday…
9 Jul 2026
Critical9 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Hackers exploited a zero-day vulnerability in a third-party system to access a KDDI email system for ISPs. The post 12 Million Impacted by Data Breach at Japanese Telco KDDI appeared first on SecurityWeek.
9 Jul 2026
Critical9 Jul 2026
Organisation not named
Education · Records not stated
The disclosure as indexed does not name the organisation.
Hackers accessed the institution’s internal network and deleted two drives containing employee, student, and university data. The post Mount Royal University Confirms Data Stolen in Ransomware Attack appeared first on…
9 Jul 2026
Critical9 Jul 2026
AssuranceAmerica data breach
Finance · Records not stated
American insurance company AssuranceAmerica has disclosed a data breach impacting nearly 7 million drivers after attackers gained access to its systems earlier this year.
9 Jul 2026
High9 Jul 2026
Harrods
Retail · 430,000 records
430K customer records stolen by unauthorized third party
9 Jul 2026
Critical9 Jul 2026
Carnival Corporation
Retail · 6,000,000 records
6M customer records stolen including names and contact data
9 Jul 2026
Critical9 Jul 2026
KDDI Six ISPs
Technology · 14,200,000 records
14.2M email credentials exposed including plaintext passwords
9 Jul 2026
Critical9 Jul 2026
700Credit Automotive
Finance · Records not stated
5.8M consumer records stolen via API compromise
9 Jul 2026
Critical9 Jul 2026
Global Credential Dump
Sector not stated · 24,000,000,000 records
24B credentials exposed via infostealer logs
9 Jul 2026
Critical9 Jul 2026
Charter Spectrum
Technology · 13,000,000 records
13M customer records leaked post-ransom refusal
9 Jul 2026
Critical9 Jul 2026
Conduent Government Services
Government · Records not stated
62.2M SSNs and health records exposed
9 Jul 2026
Critical9 Jul 2026
NYC Health Hospitals
Healthcare · 1,800,000 records
1.8M patient records exposed via vendor compromise
9 Jul 2026
Critical9 Jul 2026
Canvas LMS Instructure
Education · 275,000,000 records
275M user records stolen across 8000 institutions
9 Jul 2026
High9 Jul 2026
Liberty Mutual Insurance
Finance · Records not stated
108GB policyholder and financial records exfiltrated
9 Jul 2026
High9 Jul 2026
French Tchap Platform
Government · Records not stated
73K government accounts and 643K messages stolen
9 Jul 2026
High9 Jul 2026
VIQ Solutions
Legal · Records not stated
Court transcripts stolen via rogue subcontractor
9 Jul 2026
Critical9 Jul 2026
Charter Communications Spectrum
Technology · 40,000,000 records
40M customer records stolen via vishing attack
9 Jul 2026
Critical9 Jul 2026
Credential Dump Global
Technology · Records not stated
24B stolen credentials exposed in public database
9 Jul 2026
Critical9 Jul 2026
One Medical Senior Care
Healthcare · Records not stated
Archived elderly patient clinical records breached
9 Jul 2026
Critical9 Jul 2026
Navia Benefits
Finance · Records not stated
2.7M SSNs and benefits enrollment records exposed
9 Jul 2026
High9 Jul 2026
Basic-Fit
Retail · Records not stated
1M members' bank and PII data breached
9 Jul 2026
Were you affected?