Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,339
Disclosures in the tracker, all years
2,052
Of those, indexed in 2026
111
Added in October
18
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 25 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

74 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States23 Oct 2026Ford Audio-Video Systems, LLCThe source does not say how they got in.Vermont Attorney General
  2. United States23 Oct 2026Industrial and healthcare organizationsHow they got in: a known flaw in software the victim ran.The Hacker News
  3. United States23 Oct 2026EyeMed Vision Care, LLCThe source does not say how they got in.Vermont Attorney General
  4. United States23 Oct 2026Alabama Fire CollegeThe source does not say how they got in.Vermont Attorney General
  5. United States23 Oct 2026UltraMobile ImagingThe source does not say how they got in.HIPAA Journal
  6. United States23 Oct 2026Washington GastroenterologyThe source does not say how they got in.HIPAA Journal
  7. United States23 Oct 2026Tarter Krinsky & DroginThe source does not say how they got in.HIPAA Journal
  8. United States23 Oct 2026Quest DiagnosticsThe source does not say how they got in.SecurityWeek
  9. United States22 Oct 2026Dill Dill Carr Stonbraker & Hutchings, P.C.The source does not say how they got in.California Attorney General
  10. United States22 Oct 2026BASS Medical GroupThe source does not say how they got in.California Attorney General
  11. United States22 Oct 2026Summit School DistrictThe source does not say how they got in.Vermont Attorney General
  12. United States22 Oct 2026Nordace Limited d/b/a NordaceThe source does not say how they got in.Vermont Attorney General
High1 Jun 2026
FirstClass
Sector not stated · Records not stated
Sydney-based travel agency customer records allegedly breached, details posted on underground forums
1 Jun 2026
Critical1 Jun 2026
Puerto Rico Government Agency
Government · Records not stated
Government mapping service exposed 1 million Social Security numbers
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Thousands of patient records stolen in ransomware attack, breach disclosed 6+ months after notification
1 Jun 2026
Critical1 Jun 2026
Elasticsearch (Infostealer logs)
Technology · Records not stated
Publicly exposed Elasticsearch database leaked 24 billion stolen credentials from infostealer compilation
1 Jun 2026
Critical1 Jun 2026
Fortinet FortiGate Systems
Technology · Records not stated
FortiBleed campaign exposed valid administrative and VPN credentials for 73,932 FortiGate firewalls
1 Jun 2026
Critical1 Jun 2026
Charter Communications
Technology · 42,000,000 records
42 million customer records exposed after ShinyHunters extortion threat
1 Jun 2026
Critical1 Jun 2026
Fortinet
Technology · Records not stated
Valid administrative and VPN credentials for 73,932 FortiGate firewalls exposed in FortiBleed campaign
1 Jun 2026
Critical1 Jun 2026
Baylor Genetics
Healthcare · Records not stated
Cyberattack compromised sensitive patient genetic data and employee information
1 Jun 2026
Critical1 Jun 2026
Charter Communications
Technology · 42,000,000 records
42 million customer records exposed after breach claimed by ShinyHunters group
1 Jun 2026
Critical1 Jun 2026
Accenture
Technology · Records not stated
35GB of internal data including source code and credentials stolen by hacker
1 Jun 2026
Critical1 Jun 2026
Fortinet
Technology · Records not stated
FortiBleed campaign exposed valid administrative and VPN credentials for 73,932 FortiGate systems
1 Jun 2026
Critical1 Jun 2026
Baylor Genetics
Healthcare · Records not stated
June breach exposed patient genetic data and employee information
1 Jun 2026
Critical1 Jun 2026
Charter Communications
Technology · 42,000,000 records
Data breach exposes 42 million customer records; confirmed by ShinyHunters extortion group
1 Jun 2026
Critical1 Jun 2026
Multiple Organizations
Sector not stated · 24,000,000,000 records
24 billion records including usernames, passwords, and URLs exposed from infostealer malware
1 Jun 2026
Critical1 Jun 2026
Fortinet
Technology · Records not stated
FortiBleed campaign exposed verified administrator credentials and configuration data for 73,000+ VPN/firewall devices
1 Jun 2026
High1 Jun 2026
Tata Electronics
Technology · Records not stated
Data breach confirmed at major tech supplier to Apple and Tesla
1 Jun 2026
Critical1 Jun 2026
Charter Communications
Technology · 42,000,000 records
Data breach exposed 42 million customer records, extortion group demanded ransom
1 Jun 2026
Critical1 Jun 2026
Aflac Japan
Finance · 1,300,000 records
Data breach exposed 4.38 million customers in June 2026, second major hack within 14 months
1 Jun 2026
Critical1 Jun 2026
Canada Life
Finance · 5,500,000 records
Threat actor claimed 5.5 million records exposed including customer, employee, and corporate data
1 Jun 2026
High1 Jun 2026
Synnovis NHS
Healthcare · 900,000 records
Thousands of patient records stolen in ransomware cyberattack affecting Essex NHS trust
1 Jun 2026
High1 Jun 2026
Breach
Healthcare · Records not stated
Breach exposed SSNs and medical records
1 Jun 2026
Critical1 Jun 2026
Fortinet FortiGate
Technology · Records not stated
FortiBleed campaign exposed verified administrator credentials for 73,932 Fortinet FortiGate firewall devices
1 Jun 2026
Critical1 Jun 2026
Charter Communications
Technology · 42,000,000 records
ShinyHunters breached 42 million customer records
1 Jun 2026
Critical1 Jun 2026
Fortinet FortiGate Systems
Technology · Records not stated
73,932 FortiGate firewalls exposed with valid administrative and VPN credentials via FortiBleed campaign
1 Jun 2026
Were you affected?