Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,344
Disclosures in the tracker, all years
2,057
Of those, indexed in 2026
118
Added in October
15
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 26 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

74 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States23 Oct 2026Ford Audio-Video Systems, LLCThe source does not say how they got in.Vermont Attorney General
  2. United States23 Oct 2026Industrial and healthcare organizationsHow they got in: a known flaw in software the victim ran.The Hacker News
  3. United States23 Oct 2026EyeMed Vision Care, LLCThe source does not say how they got in.Vermont Attorney General
  4. United States23 Oct 2026Alabama Fire CollegeThe source does not say how they got in.Vermont Attorney General
  5. United States23 Oct 2026UltraMobile ImagingThe source does not say how they got in.HIPAA Journal
  6. United States23 Oct 2026Washington GastroenterologyThe source does not say how they got in.HIPAA Journal
  7. United States23 Oct 2026Tarter Krinsky & DroginThe source does not say how they got in.HIPAA Journal
  8. United States23 Oct 2026Quest DiagnosticsThe source does not say how they got in.SecurityWeek
  9. United States22 Oct 2026Dill Dill Carr Stonbraker & Hutchings, P.C.The source does not say how they got in.California Attorney General
  10. United States22 Oct 2026BASS Medical GroupThe source does not say how they got in.California Attorney General
  11. United States22 Oct 2026Summit School DistrictThe source does not say how they got in.Vermont Attorney General
  12. United States22 Oct 2026Nordace Limited d/b/a NordaceThe source does not say how they got in.Vermont Attorney General
Critical1 May 2026
NYC Health + Hospitals
Healthcare · 1,800,000 records
Hackers stole medical data, fingerprints, and biometric scans affecting 1.8 million people
1 May 2026
Critical1 May 2026
Foxconn
Technology · Records not stated
Ransomware group claimed to have stolen 8 terabytes of data from electronics manufacturing giant
1 May 2026
Critical1 May 2026
Canvas (Instructure)
Education · 275,000,000 records
Educational platform breached by ShinyHunters, 275 million records compromised, hackers threatened to leak data
1 May 2026
High1 May 2026
Instructure (Canvas)
Education · Records not stated
Ransomware attack, owner reached agreement with threat actors after data breach
1 May 2026
Critical1 May 2026
African National Congress (ANC)
Government · Records not stated
2 million private member records exposed and offered for sale by hacker group
1 May 2026
Medium1 May 2026
Aman
Retail · 215,563 records
215,563 records exposed, Dates of birth, Email addresses, Genders, Language preferences and 6 more
1 May 2026
High27 Apr 2026
Pitney Bowes
Technology · 8,243,989 records
8,243,989 records exposed, Email addresses, Job titles, Names, Phone numbers and 1 more
27 Apr 2026
High27 Apr 2026
ADT
Government · 30,000 records
5,488,888 records exposed, Dates of birth, Email addresses, Names, Partial government issued IDs and 2 more
27 Apr 2026
High26 Apr 2026
Udemy
Finance · 1,401,259 records
1,401,259 records exposed, Email addresses, Employers, Job titles, Names and 3 more
26 Apr 2026
High24 Apr 2026
Carnival
Technology · 7,531,359 records
7,531,359 records exposed, Dates of birth, Email addresses, Genders, Geographic locations and 3 more
24 Apr 2026
High17 Apr 2026
Amtrak
Retail · 2,147,679 records
2,147,679 records exposed, Email addresses, Names, Physical addresses, Support tickets
17 Apr 2026
Critical16 Apr 2026
McGraw Hill
Education · 13,500,136 records
13,500,136 records exposed, Email addresses, Names, Phone numbers, Physical addresses
16 Apr 2026
High12 Apr 2026
Hallmark
Retail · 1,736,520 records
1,736,520 records exposed, Email addresses, Names, Phone numbers, Physical addresses and 1 more
12 Apr 2026
Medium8 Apr 2026
My Lovely AI
Technology · 106,271 records
106,271 records exposed, Email addresses, Social media profiles
8 Apr 2026
High4 Apr 2026
SongTrivia2
Technology · 291,739 records
291,739 records exposed, Auth tokens, Avatars, Email addresses, Names and 2 more
4 Apr 2026
High4 Apr 2026
Crunchyroll
Retail · 1,195,684 records
1,195,684 records exposed, Email addresses
4 Apr 2026
High1 Apr 2026
Nissan
Sector not stated · Records not stated
Data breach involving third-party vendor holding customer information
1 Apr 2026
High1 Apr 2026
Heart South Cardiovascular Group
Healthcare · 46,666 records
46,666 patients affected, personal and health information exposed
1 Apr 2026
Critical1 Apr 2026
ANTS (France)
Government · 19,000,000 records
19 million records exposed from French national ID agency, personal data breach
1 Apr 2026
High1 Apr 2026
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
April 2026 data breach led to eight class-action lawsuits over exposed customer payment and personal data
1 Apr 2026
High1 Apr 2026
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Data breach in April 2026, triggered 8 class action lawsuits
1 Apr 2026
High1 Apr 2026
Legend Senior Care
Healthcare · Records not stated
Ransomware attack on senior care provider
1 Apr 2026
High1 Apr 2026
Windward Life Care
Healthcare · Records not stated
Ransomware attack on senior care provider in California
1 Apr 2026
High1 Apr 2026
Heart South Cardiovascular Group
Healthcare · 46,666 records
Data breach affects 46,666 patients, exposing personal and health information
1 Apr 2026
Were you affected?