Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,339
Disclosures in the tracker, all years
2,052
Of those, indexed in 2026
111
Added in October
18
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 25 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

74 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States23 Oct 2026Ford Audio-Video Systems, LLCThe source does not say how they got in.Vermont Attorney General
  2. United States23 Oct 2026Industrial and healthcare organizationsHow they got in: a known flaw in software the victim ran.The Hacker News
  3. United States23 Oct 2026EyeMed Vision Care, LLCThe source does not say how they got in.Vermont Attorney General
  4. United States23 Oct 2026Alabama Fire CollegeThe source does not say how they got in.Vermont Attorney General
  5. United States23 Oct 2026UltraMobile ImagingThe source does not say how they got in.HIPAA Journal
  6. United States23 Oct 2026Washington GastroenterologyThe source does not say how they got in.HIPAA Journal
  7. United States23 Oct 2026Tarter Krinsky & DroginThe source does not say how they got in.HIPAA Journal
  8. United States23 Oct 2026Quest DiagnosticsThe source does not say how they got in.SecurityWeek
  9. United States22 Oct 2026Dill Dill Carr Stonbraker & Hutchings, P.C.The source does not say how they got in.California Attorney General
  10. United States22 Oct 2026BASS Medical GroupThe source does not say how they got in.California Attorney General
  11. United States22 Oct 2026Summit School DistrictThe source does not say how they got in.Vermont Attorney General
  12. United States22 Oct 2026Nordace Limited d/b/a NordaceThe source does not say how they got in.Vermont Attorney General
High1 May 2026
UC Berkeley
Education · 600,000 records
ShinyHunters cybercrime group claimed 600K records stolen from Canvas learning management platform
1 May 2026
High1 May 2026
Atrium Health Navicent
Healthcare · Records not stated
Patient records system experienced data breach, potentially exposing patients' personal information and medical records
1 May 2026
Critical1 May 2026
Foxconn
Technology · Records not stated
Cyberattack on North American facilities with claims of stolen Apple and Nvidia data (8TB claimed)
1 May 2026
Critical1 May 2026
Canvas
Education · 275,000,000 records
Educational platform breach claims 275 million records; ShinyHunters gang reached deal to delete stolen data
1 May 2026
Critical1 May 2026
African National Congress (ANC)
Sector not stated · Records not stated
2 million private member records exposed and sold by hacker group
1 May 2026
High1 May 2026
Organisation not named
Education · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack affecting Canvas login system across thousands of universities
1 May 2026
Critical1 May 2026
Canvas
Education · 275,000,000 records
ShinyHunters hacking group claimed theft of data from educational platform affecting 275 million users
1 May 2026
Critical1 May 2026
African National Congress (ANC)
Sector not stated · Records not stated
Data breach exposed 2 million private member records sold by hacker group
1 May 2026
High1 May 2026
Organisation not named
Education · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack affecting Canvas login systems at thousands of universities
1 May 2026
High1 May 2026
Roanoke (City/Organization)
Government · Records not stated
Phishing email breach exposed Social Security numbers and passport numbers
1 May 2026
Critical1 May 2026
Canvas (Instructure)
Education · 275,000,000 records
Data breach involving 275M records from educational platform, hackers agreed to delete stolen data
1 May 2026
Critical1 May 2026
ANC (African National Congress)
Government · Records not stated
Data breach exposed 2 million private member records sold by hacker group
1 May 2026
Critical1 May 2026
Conduent
Healthcare · 62,200,000 records
62.2 million records exposed, third-largest US healthcare breach ever
1 May 2026
Critical1 May 2026
DentaQuest
Healthcare · 15,000,000 records
15 million patient records stolen in largest healthcare data breach of 2026 (May incident)
1 May 2026
Critical1 May 2026
Instructure (Canvas)
Education · Records not stated
Ransomware attack on Canvas learning management system affecting thousands of schools nationwide
1 May 2026
High1 May 2026
Canvas
Education · Records not stated
Massive data breach affecting schools nationwide from ransomware attack and extortion
1 May 2026
Critical1 May 2026
DentaQuest
Healthcare · 15,000,000 records
15 million patients impacted in largest healthcare breach of 2026, second-largest dental benefits administrator in U.S.
1 May 2026
Medium1 May 2026
7-Eleven
Retail · Records not stated
Unauthorized third party gained access to systems storing franchisee documents in confirmed data breach
1 May 2026
High1 May 2026
Canvas
Education · Records not stated
Massive data breach affecting schools nationwide; extortion attack on education platform
1 May 2026
Critical1 May 2026
Instructure (Canvas platform)
Education · Records not stated
Supply chain breach driving 58% of all breach notices in 2026
1 May 2026
Critical1 May 2026
DentaQuest
Healthcare · 15,000,000 records
Second-largest dental benefits administrator breached; 15M patients impacted in largest 2026 healthcare breach
1 May 2026
High1 May 2026
West Pharmaceutical Services
Healthcare · Records not stated
Ransomware attack forced systems offline globally, disrupting operations
1 May 2026
High1 May 2026
Canvas (Instructure)
Education · Records not stated
Ransomware attack shut down education platform used by universities and K-12 schools across US, impacting thousands of students during finals week
1 May 2026
High1 May 2026
Canvas
Education · Records not stated
Massive data breach affecting schools and colleges nationwide, with data extortion attack
1 May 2026
Were you affected?