Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,342
Disclosures in the tracker, all years
2,057
Of those, indexed in 2026
119
Added in October
16
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 26 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

74 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States23 Oct 2026Ford Audio-Video Systems, LLCThe source does not say how they got in.Vermont Attorney General
  2. United States23 Oct 2026Industrial and healthcare organizationsHow they got in: a known flaw in software the victim ran.The Hacker News
  3. United States23 Oct 2026EyeMed Vision Care, LLCThe source does not say how they got in.Vermont Attorney General
  4. United States23 Oct 2026Alabama Fire CollegeThe source does not say how they got in.Vermont Attorney General
  5. United States23 Oct 2026UltraMobile ImagingThe source does not say how they got in.HIPAA Journal
  6. United States23 Oct 2026Washington GastroenterologyThe source does not say how they got in.HIPAA Journal
  7. United States23 Oct 2026Tarter Krinsky & DroginThe source does not say how they got in.HIPAA Journal
  8. United States23 Oct 2026Quest DiagnosticsThe source does not say how they got in.SecurityWeek
  9. United States22 Oct 2026Dill Dill Carr Stonbraker & Hutchings, P.C.The source does not say how they got in.California Attorney General
  10. United States22 Oct 2026BASS Medical GroupThe source does not say how they got in.California Attorney General
  11. United States22 Oct 2026Summit School DistrictThe source does not say how they got in.Vermont Attorney General
  12. United States22 Oct 2026Nordace Limited d/b/a NordaceThe source does not say how they got in.Vermont Attorney General
High1 Apr 2026
Apple American Group (Applebee's)
Retail · Records not stated
April 2026 data breach affecting customers, resulted in eight class-action lawsuits
1 Apr 2026
Critical1 Apr 2026
UK Biobank
Healthcare · Records not stated
Private health records of 500,000 Britons offered for sale on Chinese website (Alibaba)
1 Apr 2026
High1 Apr 2026
Ryanair
Sector not stated · Records not stated
Breach exposing court documents, legal emails, flight data, and banking details; data claimed on hacker forums
1 Apr 2026
Critical1 Apr 2026
US Government Agency
Government · Records not stated
Unnamed federal department breached through Cisco vulnerability; FIRESTARTER backdoor allowed persistent access through March
1 Apr 2026
Critical1 Apr 2026
UK Biobank
Healthcare · Records not stated
Private health records of 500,000 Britons offered for sale on Chinese website Alibaba
1 Apr 2026
High1 Apr 2026
Nissan
Technology · Records not stated
Data stolen from third-party vendor's file-transfer system used by Nissan and Infiniti
1 Apr 2026
High1 Apr 2026
Heart South Cardiovascular Group
Healthcare · 46,666 records
Data breach exposed personal and health information of 46,666 patients
1 Apr 2026
Critical1 Apr 2026
ANTS (French ID Agency)
Government · 19,000,000 records
Cyberattack exposed 19 million records including personal data linked to identity documents
1 Apr 2026
High1 Apr 2026
Signature Healthcare Brockton Hospital
Healthcare · Records not stated
Ransomware cyberattack causing system downtime; clinics offline for two weeks
1 Apr 2026
Critical1 Apr 2026
ANTS (French ID Agency)
Government · 19,000,000 records
Cyberattack exposed 19M records including personal identity data
1 Apr 2026
Critical1 Apr 2026
Intesa Sanpaolo S.p.A.
Finance · Records not stated
Employee unlawfully accessed customer data over 2+ years; €31.8M fine
1 Apr 2026
High1 Apr 2026
Ryanair
Sector not stated · Records not stated
Court documents, flight data, and banking details exposed in hacker forum
1 Apr 2026
High1 Apr 2026
Nissan
Technology · Records not stated
Third-party vendor file-transfer system breach exposed data from services used by Nissan and Infiniti
1 Apr 2026
High1 Apr 2026
Heart South Cardiovascular Group
Healthcare · 46,666 records
46,666 patients' personal and health information exposed
1 Apr 2026
Critical1 Apr 2026
UK Biobank
Healthcare · Records not stated
Private health records of 500,000 Britons offered for sale on Chinese website
1 Apr 2026
Critical1 Apr 2026
Intesa Sanpaolo S.p.A.
Finance · Records not stated
Employee unlawfully accessed customer data over two years, €31.8M fine for breach transparency
1 Apr 2026
Critical1 Apr 2026
US Government Agency (CISA)
Government · Records not stated
Breached through Cisco vulnerability; FIRESTARTER backdoor allowed access through March
1 Apr 2026
High1 Apr 2026
Nissan
Technology · Records not stated
Hacking group breached file-transfer system used by third-party vendor serving Nissan and Infiniti
1 Apr 2026
High1 Apr 2026
Legend Senior Care
Healthcare · Records not stated
Senior care provider affected by ransomware attack disclosing data security incident
1 Apr 2026
High1 Apr 2026
Windward Life Care
Healthcare · Records not stated
Senior care provider affected by ransomware attack disclosing data security incident
1 Apr 2026
High1 Apr 2026
Heart South Cardiovascular Group
Healthcare · 46,666 records
Data breach affected 46,666 patients exposing personal and health records
1 Apr 2026
Critical1 Apr 2026
ANTS (France)
Government · 19,000,000 records
Cyberattack on France's identity agency exposed 19 million records with personal data
1 Apr 2026
Critical1 Apr 2026
Intesa Sanpaolo
Finance · Records not stated
Insider threat breach with employee unlawfully accessing customer data for over two years
1 Apr 2026
High1 Apr 2026
Nissan
Retail · Records not stated
Hacking group breached file-transfer system used by third-party vendor
1 Apr 2026
Were you affected?