Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,319
Disclosures in the tracker, all years
2,034
Of those, indexed in 2026
87
Added in October
21
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 22 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

72 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States21 Oct 2026Critical infrastructure organizations worldwideHow they got in: stolen or reused passwords.BleepingComputer
  2. United States21 Oct 2026Ohio LivingThe source does not say how they got in.Vermont Attorney General
  3. United States21 Oct 2026Michael J. Berger and Co., CPA LLPThe source does not say how they got in.Vermont Attorney General
  4. United States20 Oct 2026CSXThe source does not say how they got in.Vermont Attorney General
  5. United States20 Oct 2026Networking Technology, Inc.The source does not say how they got in.Vermont Attorney General
  6. United States20 Oct 2026Conduent Business Services, LLCThe source does not say how they got in.HIPAA Journal
  7. United States20 Oct 2026Central Ohio Primary Care PhysiciansHow they got in: stolen or reused passwords.HIPAA Journal
  8. United States20 Oct 2026Educational Testing ServiceThe source does not say how they got in.The Record
  9. United States20 Oct 2026Chevy Chase ClubThe source does not say how they got in.Vermont Attorney General
  10. United States20 Oct 2026Paradigm Healthcare ServicesThe source does not say how they got in.SecurityWeek
  11. United States19 Oct 2026Computer Task Group, IncorporatedThe source does not say how they got in.Vermont Attorney General
  12. United States19 Oct 2026Citizens BankThe source does not say how they got in.California Attorney General
High1 Jul 2026
Department of Homeland Security
Government · Records not stated
Network intrusion confirmed on Homeland Security Information Network supporting World Cup operations
1 Jul 2026
High1 Jul 2026
River Bank
Finance · Records not stated
Customer data stolen in ransomware attack; hackers confirmed deletion of stolen data
1 Jul 2026
Critical1 Jul 2026
Amgen
Healthcare · Records not stated
Patient health data and intellectual property stolen via compromised cloud environment
1 Jul 2026
Critical1 Jul 2026
Origin Energy
Sector not stated · 2,000,000 records
Data breach with information of 2 million customers stolen by hacker
1 Jul 2026
Critical1 Jul 2026
Accenture
Technology · Records not stated
Data breach with 35GB of internal data including source code and credentials stolen
1 Jul 2026
High1 Jul 2026
Coca-Cola Fairlife
Retail · Records not stated
Ransomware attack on Fairlife dairy subsidiary resulted in data breach
1 Jul 2026
High1 Jul 2026
Comcast Xfinity
Technology · 35,000,000 records
Cyberattack exposed personal information of Xfinity customers; $117.5M settlement
1 Jul 2026
Critical1 Jul 2026
Madera Community Hospital
Healthcare · 150,000 records
150,000 patients' personal, financial, and medical information stolen by extortion group
1 Jul 2026
High1 Jul 2026
Apollo Global Management
Finance · Records not stated
Hackers stole personal information in data breach targeting financial firms
1 Jul 2026
High1 Jul 2026
Hugging Face
Technology · Records not stated
Breach involving rogue AI agent that exposed credentials across multiple services
1 Jul 2026
High1 Jul 2026
Origin Energy
Sector not stated · Records not stated
Approximately 60 customers' full bank accounts and ID numbers accessed in July breach
1 Jul 2026
High1 Jul 2026
Coca-Cola/Fairlife
Retail · Records not stated
Ransomware attack on dairy subsidiary Fairlife resulted in data breach
1 Jul 2026
High1 Jul 2026
Apollo Global Management
Finance · Records not stated
Data breach exposed personal information of customers after hacker attack on financial firm
1 Jul 2026
High1 Jul 2026
Aesto Health
Healthcare · Records not stated
Patient information impacted in data breach; lawsuit possible
1 Jul 2026
Critical1 Jul 2026
Conduent
Healthcare · 62,200,000 records
62.2M people affected in third-largest US healthcare breach ever
1 Jul 2026
High1 Jul 2026
Nova Scotia Power
Sector not stated · Records not stated
Hacked customer data spanning three decades was not deleted as planned
1 Jul 2026
High1 Jul 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack resulted in data theft; hackers confirmed data deletion
1 Jul 2026
High1 Jul 2026
Origin Energy
Sector not stated · Records not stated
Approximately 60 customers' full bank account numbers and ID numbers accessed in July breach
1 Jul 2026
High1 Jul 2026
Accenture
Technology · Records not stated
Data breach after hacker claimed theft of 35GB internal data including source code and credentials
1 Jul 2026
High1 Jul 2026
Data theft
Government · Records not stated
Data theft confirmed after dark web leak, ExfilSquad claimed 135000 contact records
1 Jul 2026
Critical1 Jul 2026
Thailand Digital Ministry
Government · Records not stated
221 million login records exposed online, identified by Digital Ministry
1 Jul 2026
High1 Jul 2026
Coca-Cola (Fairlife subsidiary)
Retail · Records not stated
Data breach from ransomware attack on Fairlife dairy subsidiary
1 Jul 2026
High1 Jul 2026
Apollo Global Management
Finance · Records not stated
Data breach in July 2026 where hackers stole personal information from asset manager
1 Jul 2026
High1 Jul 2026
Hugging Face
Technology · Records not stated
Breach exposed credentials used by OpenAI agent across four services
1 Jul 2026
Were you affected?