Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,319
Disclosures in the tracker, all years
2,034
Of those, indexed in 2026
87
Added in October
21
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 22 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

72 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States21 Oct 2026Critical infrastructure organizations worldwideHow they got in: stolen or reused passwords.BleepingComputer
  2. United States21 Oct 2026Ohio LivingThe source does not say how they got in.Vermont Attorney General
  3. United States21 Oct 2026Michael J. Berger and Co., CPA LLPThe source does not say how they got in.Vermont Attorney General
  4. United States20 Oct 2026CSXThe source does not say how they got in.Vermont Attorney General
  5. United States20 Oct 2026Networking Technology, Inc.The source does not say how they got in.Vermont Attorney General
  6. United States20 Oct 2026Conduent Business Services, LLCThe source does not say how they got in.HIPAA Journal
  7. United States20 Oct 2026Central Ohio Primary Care PhysiciansHow they got in: stolen or reused passwords.HIPAA Journal
  8. United States20 Oct 2026Educational Testing ServiceThe source does not say how they got in.The Record
  9. United States20 Oct 2026Chevy Chase ClubThe source does not say how they got in.Vermont Attorney General
  10. United States20 Oct 2026Paradigm Healthcare ServicesThe source does not say how they got in.SecurityWeek
  11. United States19 Oct 2026Computer Task Group, IncorporatedThe source does not say how they got in.Vermont Attorney General
  12. United States19 Oct 2026Citizens BankThe source does not say how they got in.California Attorney General
High1 Jul 2026
Department for Education
Government · Records not stated
Data breach claimed by ExfilSquad group, details leaked on dark web
1 Jul 2026
High1 Jul 2026
Fairlife (Coca-Cola)
Retail · Records not stated
Ransomware attack on dairy unit affected production systems; US Fairlife production suspended
1 Jul 2026
High1 Jul 2026
Craneware
Healthcare · Records not stated
Hackers stole customer data from major hospital software vendor in supply-chain attack
1 Jul 2026
High1 Jul 2026
Abbott Laboratories
Healthcare · Records not stated
Cyber incident affecting medical device company with patient data exposure
1 Jul 2026
Critical1 Jul 2026
Origin Energy
Sector not stated · 2,000,000 records
2 million customer records stolen in hack of Australian energy giant
1 Jul 2026
High1 Jul 2026
Hugging Face
Technology · Records not stated
Internal datasets and credentials compromised, users urged to rotate access tokens
1 Jul 2026
High1 Jul 2026
LVM (Latvian Forestry)
Sector not stated · Records not stated
State-owned forestry company LVM affected by ransomware attack; systems still restoring weeks later
1 Jul 2026
High1 Jul 2026
Fairlife (Coca-Cola)
Retail · Records not stated
Ransomware attack on Fairlife dairy unit affected production systems; US production suspended
1 Jul 2026
High1 Jul 2026
Exact Sciences
Healthcare · Records not stated
Alleged data breach reported by hackers; attorney investigation ongoing
1 Jul 2026
High1 Jul 2026
Craneware
Healthcare · Records not stated
Hospital software vendor breach exposed customer data; supply-chain attack on healthcare industry
1 Jul 2026
High1 Jul 2026
Abbott Laboratories
Healthcare · Records not stated
Cyber incident investigated involving medical device company; lawsuit filed by affected patients
1 Jul 2026
High1 Jul 2026
Hugging Face
Technology · Records not stated
Breach affected internal datasets and credentials; users urged to rotate access tokens
1 Jul 2026
High1 Jul 2026
Chick-fil-A
Retail · Records not stated
Customer loyalty accounts accessed using stolen usernames and passwords
1 Jul 2026
High1 Jul 2026
Cure Dental
Healthcare · Records not stated
Current and former patients' PII exposed in data breach
1 Jul 2026
High1 Jul 2026
Abbott Laboratories
Healthcare · Records not stated
Cyber incident affecting diagnostics company involving patient data exposure
1 Jul 2026
Critical1 Jul 2026
Estée Lauder
Retail · Records not stated
Data breach via Oracle E-Business Suite exposure of SSNs, passports, and health records (Clop campaign)
1 Jul 2026
Critical1 Jul 2026
Amgen
Healthcare · Records not stated
Hackers accessed cloud environment, stealing patient health data and proprietary company information
1 Jul 2026
Critical1 Jul 2026
Origin Energy
Sector not stated · 2,000,000 records
Hacker claimed to steal information of 2 million customers from Australian energy giant
1 Jul 2026
High1 Jul 2026
Bank of Baroda
Finance · Records not stated
Employee email account compromised allowing unauthorized access to certain data
1 Jul 2026
High1 Jul 2026
Hugging Face
Technology · Records not stated
Breach affected internal datasets and credentials, users urged to rotate access tokens
1 Jul 2026
Critical1 Jul 2026
Accenture
Technology · Records not stated
Data breach with 35GB of internal data stolen including source code and credentials
1 Jul 2026
High1 Jul 2026
Fairlife (Coca-Cola)
Retail · Records not stated
Ransomware attack affected production-related systems at dairy unit
1 Jul 2026
High1 Jul 2026
Clover Health
Healthcare · Records not stated
Health insurer data breach; type and volume of exposed data still unknown
1 Jul 2026
High1 Jul 2026
Craneware
Healthcare · Records not stated
Hospital software vendor breach; supply-chain attack exposed customer data
1 Jul 2026
Were you affected?