Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,360
Disclosures in the tracker, all years
2,076
Of those, indexed in 2026
137
Added in October
16
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 29 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

76 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Russia23 Oct 2026PingCAPHow they got in: stolen or reused passwords.SecurityWeek
Critical31 Jul 2026
Gaming accounts (Kaspersky research)
Technology · Records not stated
Over 11 million gaming account credentials exposed and found on dark web
31 Jul 2026
High31 Jul 2026
Synnovis NHS
Healthcare · 900,000 records
Thousands of patient records stolen in major ransomware cyberattack affecting NHS trust in Essex
31 Jul 2026
Critical31 Jul 2026
Medical billing company
Healthcare · 1,300,000 records
Ransomware attack exposed protected health data on 1.3 million people; data leaked to dark web
31 Jul 2026
Critical31 Jul 2026
ANTS
Government · 19,000,000 records
Cyberattack on France's identity agency exposed 19 million records with personal data linked to ID documents
31 Jul 2026
High31 Jul 2026
Cherry Creek School District
Education · Records not stated
Data breach exposed student information, lawsuit filed
31 Jul 2026
High31 Jul 2026
Data security incident
Retail · Records not stated
Data security incident exposed personal information, $40M settlement reached
31 Jul 2026
Medium31 Jul 2026
Illuminate Education
Education · Records not stated
Edtech company data breach leading to FTC settlement and data security program requirements
31 Jul 2026
Critical31 Jul 2026
Healthcare billing company network breach
Healthcare · 1,260,000 records
Healthcare billing company network breach exposed sensitive data affecting 1.26 million people
31 Jul 2026
High31 Jul 2026
KT Corp
Technology · Records not stated
South Korea telecom giant hit with massive data breach fine by Personal Information Protection Commission
31 Jul 2026
Critical31 Jul 2026
Transport for London (TfL)
Government · Records not stated
Cyber attack caused £39m loss; hackers gained access to transport network core systems
31 Jul 2026
Critical31 Jul 2026
EVO Banco
Finance · 1,270,000 records
2024 API vulnerability exposed financial and identity data of 1.27 million records
31 Jul 2026
High31 Jul 2026
Intesa Sanpaolo S.p.A.
Finance · Records not stated
Employee unlawfully accessed customer data over two years, €31.8m impact
31 Jul 2026
High31 Jul 2026
Synnovis/NHS Essex
Healthcare · 900,000 records
Thousands of patient records stolen in ransomware attack affecting NHS trust in Essex
31 Jul 2026
Critical31 Jul 2026
McLaren Health Care
Healthcare · Records not stated
Ransomware attacks in 2023 and 2024 exposed data on 3.2 million victims
31 Jul 2026
Critical31 Jul 2026
Instructure
Education · Records not stated
Supply chain breach involving Canvas platform generated over 50% of breach notices in 2026
31 Jul 2026
High31 Jul 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
Data breach with cybersecurity vulnerabilities; fined €42 million by French regulator in Jan 2026
31 Jul 2026
High31 Jul 2026
Yearslong data breach of residents' private health-related information
Government · Records not stated
Yearslong data breach of residents' private health-related information
31 Jul 2026
High31 Jul 2026
CommonSpirit Health
Healthcare · 19,027 records
19,027 patient records exposing personal and medical information
31 Jul 2026
High31 Jul 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen in ransomware attack
31 Jul 2026
High31 Jul 2026
EY (Ernst & Young)
Legal · Records not stated
Third-party vendor breach exposed sensitive tax client data after 81-day notification delay
31 Jul 2026
Critical31 Jul 2026
Spectrum (Charter Communications)
Technology · 42,000,000 records
Data breach exposed 4.9 million confirmed accounts with 42 million records claimed stolen
31 Jul 2026
Critical31 Jul 2026
ANTS (French ID Agency)
Government · 19,000,000 records
Cyberattack exposed 19 million records with personal data linked to French identity documents
31 Jul 2026
High31 Jul 2026
U.S. Civil Service/White House
Government · Records not stated
Thousands of civil servants' passwords and White House-linked passwords exposed since early 2024
31 Jul 2026
Critical31 Jul 2026
TriZetto
Healthcare · 3,000,000 records
More than 3 million people impacted by breach of healthcare tech provider software affecting multiple counties
31 Jul 2026
Were you affected?