Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,362
Disclosures in the tracker, all years
2,076
Of those, indexed in 2026
136
Added in October
19
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 28 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

75 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Singapore22 Oct 2026GenesysThe source does not say how they got in.The Hacker News
High1 Aug 2026
Bank of Baroda
Finance · Records not stated
Compromised employee email account allowed unauthorized access to certain data
1 Aug 2026
High1 Aug 2026
Police National Legal Database
Government · Records not stated
135,000 contact records stolen and leaked on dark web by ExfilSquad
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
221 million login records exposed; Digital Ministry seeking MFA mandate on key state systems
1 Aug 2026
Critical1 Aug 2026
France DGFiP
Government · 678,000 records
Tax authority breach exposed records of 678,000 people and businesses with tax, business and property information
1 Aug 2026
Medium1 Aug 2026
Trezor
Technology · Records not stated
Third-party fulfillment partner breach exposed shipping addresses of 14,000 hardware wallet buyers
1 Aug 2026
High1 Aug 2026
Uber Freight
Technology · Records not stated
Hacking group claimed data breach at ridesharing giant's logistics division; investigation underway
1 Aug 2026
High1 Aug 2026
Valve (CEVA Logistics partner)
Technology · Records not stated
Steam hardware shipping partner CEVA Logistics breached, exposing European customer names, addresses, order data
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Clop hacking group claimed theft of data from nearly 50 multinational firms via vulnerability exploitation
1 Aug 2026
High1 Aug 2026
Levi Strauss
Retail · Records not stated
Hackers used social engineering to access employee computers and steal corporate data
1 Aug 2026
High1 Aug 2026
Bank of Baroda
Finance · Records not stated
Cyber incident from compromised employee email account allowing unauthorized data access
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records stolen and leaked on dark web by ExfilSquad
1 Aug 2026
Critical1 Aug 2026
Thailand Digital Ministry
Government · Records not stated
221 million login records exposed, MFA mandate sought for state systems
1 Aug 2026
High1 Aug 2026
DGFiP (France)
Government · 678,000 records
678,000 records exposed including tax, business and property information
1 Aug 2026
Medium1 Aug 2026
Trezor
Technology · Records not stated
Third-party fulfillment partner breach exposed shipping addresses of 14,000 hardware wallet buyers in 7 countries
1 Aug 2026
High1 Aug 2026
Uber Freight
Technology · Records not stated
Hacking group claimed responsibility for data breach at Uber Freight logistics division
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Woeful security at criminal records office led to sensitive data leak, unable to confirm if exfiltrated
1 Aug 2026
High1 Aug 2026
Valve (via CEVA Logistics)
Technology · Records not stated
European logistics partner breached; customer names, addresses, and order data exposed for Steam hardware customers
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Large-scale data theft claimed by hacking group exploiting software vulnerabilities across multiple targets
1 Aug 2026
High1 Aug 2026
Fiserv
Finance · Records not stated
Hacking group claimed mass data theft via software vulnerability exploitation
1 Aug 2026
High1 Aug 2026
GE
Sector not stated · Records not stated
Hacking group claimed mass data theft via software vulnerability exploitation
1 Aug 2026
High1 Aug 2026
Philips
Technology · Records not stated
Hacking group claimed mass data theft via software vulnerability exploitation
1 Aug 2026
High1 Aug 2026
Shell
Sector not stated · Records not stated
Hacking group claimed mass data theft via software vulnerability exploitation
1 Aug 2026
High1 Aug 2026
Steam/CEVA Logistics
Technology · Records not stated
CEVA Logistics breach exposes names and addresses of European Steam hardware buyers
1 Aug 2026
High1 Aug 2026
LexisNexis
Legal · Records not stated
Suspicious activity detected on servers, Diligence, Metabase API, and Newsdesk services taken offline
1 Aug 2026
Were you affected?