Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,359
Disclosures in the tracker, all years
2,075
Of those, indexed in 2026
136
Added in October
15
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 29 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

75 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Singapore22 Oct 2026GenesysThe source does not say how they got in.The Hacker News
High1 Aug 2026
Valve / CEVA Logistics
Technology · Records not stated
Steam hardware shipping partner breach exposed customer names, addresses, and order data in Europe
1 Aug 2026
High1 Aug 2026
Coca-Cola Fairlife
Retail · Records not stated
Ransomware attack shut down dairy operations resulting in $4B brand disruption
1 Aug 2026
High1 Aug 2026
Sensitive criminal records data
Government · Records not stated
Sensitive criminal records data leaked due to woeful security and unpatched CMS
1 Aug 2026
High1 Aug 2026
Simian
Retail · Records not stated
Groningen-based printing company; hackers accessed Dutch credit card data affecting customers in Netherlands and Belgium
1 Aug 2026
Medium1 Aug 2026
Trezor
Technology · Records not stated
Customer records exposed for 13,689 buyers in phishing attack
1 Aug 2026
High1 Aug 2026
Insecure CMS led to sensitive data
Government · Records not stated
Insecure CMS led to sensitive data leak from criminal records office
1 Aug 2026
High1 Aug 2026
Fairlife (Coca-Cola)
Retail · Records not stated
Ransomware attack shut down dairy operations, data exposure from attack
1 Aug 2026
High1 Aug 2026
CEVA Logistics/Steam
Technology · Records not stated
CEVA Logistics hack exposed Steam customer names and addresses of European hardware buyers
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Unpatched CMS led to sensitive criminal records data leak
1 Aug 2026
High1 Aug 2026
Coca-Cola Dairy (Coca-Cola)
Retail · Records not stated
Ransomware attack shut down dairy operations; $4 billion brand affected
1 Aug 2026
High1 Aug 2026
WellPoint Texas
Healthcare · Records not stated
Personal information exposure; class action investigation launched
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Woeful security practices led to sensitive criminal records data leak
1 Aug 2026
Critical1 Aug 2026
Estée Lauder
Retail · Records not stated
Data breach via Oracle E-Business Suite exposed SSNs, passports, health records in Clop campaign
1 Aug 2026
Critical1 Aug 2026
Tribeca Festival
Sector not stated · Records not stated
Data leak exposed hundreds of thousands of records and celebrities' contact information
1 Aug 2026
Medium1 Aug 2026
Health Sciences Centre
Healthcare · Records not stated
Ransomware attack affecting facility maintenance systems including HVAC
1 Aug 2026
High1 Aug 2026
Woeful security led to sensitive data
Government · Records not stated
Woeful security led to sensitive data leak from unpatched CMS
1 Aug 2026
High1 Aug 2026
Woeful security led to sensitive data
Government · Records not stated
Woeful security led to sensitive data leak; uncertainty over exfiltration
1 Aug 2026
High1 Aug 2026
Valve/Steam
Technology · Records not stated
European logistics partner CEVA Logistics breached; customer names, addresses, order data stolen affecting Steam hardware shipments
1 Aug 2026
High1 Aug 2026
Uber Freight
Technology · Records not stated
Hacking and extortion gang claimed data breach at ridesharing giant's logistics division
1 Aug 2026
High1 Aug 2026
Woeful security led to sensitive criminal records data
Government · Records not stated
Woeful security led to sensitive criminal records data leak, exfiltration status unknown
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Woeful security led to sensitive data leak from criminal records system
1 Aug 2026
High1 Aug 2026
Woeful security led to sensitive criminal data
Government · Records not stated
Woeful security led to sensitive criminal data leak exposure
1 Aug 2026
Critical1 Aug 2026
LiteLLM (AI supply chain)
Technology · Records not stated
2,500+ companies and 434,000 CI/CD pipelines exposed in largest AI supply chain breach of 2026
1 Aug 2026
High1 Aug 2026
Healthcare advocacy vendor breach
Healthcare · Records not stated
Healthcare advocacy vendor breach exposed employees' Social Security numbers
1 Aug 2026
Were you affected?