Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,360
Disclosures in the tracker, all years
2,076
Of those, indexed in 2026
137
Added in October
16
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 29 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

76 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Russia23 Oct 2026PingCAPHow they got in: stolen or reused passwords.SecurityWeek
High1 Aug 2026
Klue
Technology · Records not stated
200 firms hit via stolen OAuth credentials
1 Aug 2026
Critical1 Aug 2026
Cardiovascular Institute New England
Healthcare · Records not stated
Full medical and financial records confirmed exposed
1 Aug 2026
Critical1 Aug 2026
Nissan Motor
Sector not stated · 53,000 records
SSNs and banking data stolen from US and Canada employees
1 Aug 2026
Critical1 Aug 2026
AssuranceAmerica Insurance
Finance · Records not stated
6.9M driver license numbers stolen
1 Aug 2026
Critical1 Aug 2026
Craneware Healthcare Billing
Healthcare · Records not stated
Patient and customer data stolen from 12K US facilities
1 Aug 2026
High1 Aug 2026
Klue
Technology · Records not stated
200 firms breached via stale Salesforce credential
1 Aug 2026
High1 Aug 2026
Estee Lauder
Retail · Records not stated
SSNs, passports, bank data stolen from employees
1 Aug 2026
Critical1 Aug 2026
Fairlife Coca-Cola
Sector not stated · Records not stated
Ransomware hit production systems, 1TB data stolen
1 Aug 2026
Critical1 Aug 2026
EY Ernst Young
Finance · Records not stated
SSNs, tax records, card numbers stolen from clients
1 Aug 2026
Critical1 Aug 2026
KDDI
Technology · 14,200,000 records
14.2M email credentials exposed at six ISPs
1 Aug 2026
High1 Aug 2026
Cardiovascular Institute NE
Healthcare · Records not stated
SSNs and patient medical records leaked
1 Aug 2026
High1 Aug 2026
South Korea MFA
Government · Records not stated
6000 diplomat records stolen over 10 months
1 Aug 2026
High1 Aug 2026
Unlimited Systems
Healthcare · 442,000 records
442K patient records exposed in ransomware
1 Aug 2026
Critical1 Aug 2026
Suno AI
Technology · 55,000,000 records
55M user names and addresses stolen
1 Aug 2026
Critical1 Aug 2026
Ernst and Young
Finance · Records not stated
SSNs and tax data stolen via support system
1 Aug 2026
Critical1 Aug 2026
Fluke Corporation
Technology · Records not stated
21M Salesforce records with PII compromised
1 Aug 2026
High1 Aug 2026
Mount Royal University
Education · Records not stated
10TB stolen, students and staff impacted
1 Aug 2026
High1 Aug 2026
Chick-fil-A
Retail · Records not stated
Account credentials stolen via stuffing attack
1 Aug 2026
High1 Aug 2026
Origin Energy
Sector not stated · Records not stated
Customer data exposed in confirmed cyberattack
1 Aug 2026
High1 Aug 2026
Mount Royal University
Education · Records not stated
10TB stolen from Canadian university systems
1 Aug 2026
High1 Aug 2026
South Korea Diplomatic Academy
Government · Records not stated
6K diplomat records stolen over 10 months
1 Aug 2026
High1 Aug 2026
Abbott Laboratories
Healthcare · Records not stated
Customer data stolen via voice phishing campaign
1 Aug 2026
Critical1 Aug 2026
Craneware
Healthcare · Records not stated
Significant data stolen affecting 2K US hospitals
1 Aug 2026
Critical1 Aug 2026
EY Tax Practice
Finance · Records not stated
SSNs and tax data stolen via third-party helpdesk
1 Aug 2026
Were you affected?