Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,362
Disclosures in the tracker, all years
2,076
Of those, indexed in 2026
136
Added in October
15
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 29 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

75 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Singapore22 Oct 2026GenesysThe source does not say how they got in.The Hacker News
Critical1 Aug 2026
Conduent
Healthcare · Records not stated
62.2 million healthcare records exposed, third-largest US healthcare breach ever
1 Aug 2026
High1 Aug 2026
Five Hong Kong firms
Sector not stated · Records not stated
Orova ransomware breached five Hong Kong organizations in debut campaign of 24 victims
1 Aug 2026
High1 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Wave of cyberattacks by UNC6671 extortion group targeting hedge funds and private-equity firms
1 Aug 2026
Critical1 Aug 2026
Snowflake (multiple customer accounts)
Technology · 165,000,000 records
Company accounts accessed and customer data stolen in cloud data-theft attacks
1 Aug 2026
High1 Aug 2026
Levi Strauss
Retail · Records not stated
Corporate data stolen via social engineering; hackers accessed three employee computers
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · 135,000 records
The disclosure as indexed does not name the organisation.
Police and government contact details published on dark web; 135K records claimed
1 Aug 2026
High1 Aug 2026
Multiple Hong Kong firms
Sector not stated · Records not stated
Orova ransomware breached five Hong Kong organizations; part of 24-victim campaign across six countries
1 Aug 2026
Medium1 Aug 2026
Stade Français
Sector not stated · Records not stated
French rugby club experienced cyberattack with data leak; systems restored from backups
1 Aug 2026
High1 Aug 2026
NHS Tayside
Healthcare · 900,000 records
Unauthorized access to medical records of deceased 9-year-old girl after staff improper access
1 Aug 2026
High1 Aug 2026
CEVA Logistics
Sector not stated · Records not stated
Data breach affecting Ajax football club, ING bank, and Ace & Tate eyewear chain
1 Aug 2026
High1 Aug 2026
200 accounts compromised through on-premises Microsoft SharePoint vulnerabilities
Government · Records not stated
200 accounts compromised through on-premises Microsoft SharePoint vulnerabilities
1 Aug 2026
High1 Aug 2026
Data theft
Government · Records not stated
Data theft confirmed; 135K contact records leaked on dark web by ExfilSquad
1 Aug 2026
Critical1 Aug 2026
Multiple water utilities
Government · Records not stated
Operational technology systems targeted in cyberattacks across at least 12 U.S. states
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised; anomalies detected in on-premises Microsoft servers, possibly via SharePoint vulnerabilities
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records stolen and leaked on dark web; police and government contact details exposed
1 Aug 2026
Critical1 Aug 2026
Victorian Courts
Government · Records not stated
Hackers leaked sensitive court data to dark web including family violence intervention details
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised in on-premises Microsoft servers, likely due to SharePoint vulnerabilities
1 Aug 2026
High1 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack; stolen data deletion confirmed by hacker group
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135k contact records stolen; police and government contact details leaked on dark web
1 Aug 2026
High1 Aug 2026
Beacon CRM
Sector not stated · Records not stated
Software firm breach affected charities; Charity Commission planning guidance
1 Aug 2026
Critical1 Aug 2026
Victorian Court System
Government · Records not stated
Sensitive data including family violence intervention orders leaked to dark web
1 Aug 2026
High1 Aug 2026
AnMed
Healthcare · Records not stated
Nonprofit health system cyberattack forced facility closures and prolonged recovery
1 Aug 2026
Critical1 Aug 2026
Multiple US Financial Firms
Finance · Records not stated
Hackers breaking into large U.S. financial firms to steal sensitive data and extort victims
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised via anomalies detected in on-premises Microsoft servers
1 Aug 2026
Were you affected?