Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,351
Disclosures in the tracker, all years
2,065
Of those, indexed in 2026
124
Added in October
16
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 27 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

75 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States26 Oct 2026Monmouth UniversityThe source does not say how they got in.Vermont Attorney General
  2. United States26 Oct 2026Denver Health Medical PlanThe source does not say how they got in.HIPAA Journal
  3. United States24 Oct 2026Brooklyn Counseling ServicesThe source does not say how they got in.Vermont Attorney General
  4. United States24 Oct 2026Northeastern Mental Health CenterThe source does not say how they got in.Vermont Attorney General
  5. United States23 Oct 2026Industrial and healthcare organizationsHow they got in: a known flaw in software the victim ran.The Hacker News
  6. United States23 Oct 2026RL Schreiber, Inc.The source does not say how they got in.Vermont Attorney General
  7. United States23 Oct 2026Ford Audio-Video Systems, LLCThe source does not say how they got in.Vermont Attorney General
  8. United States23 Oct 2026EyeMed Vision Care, LLCThe source does not say how they got in.Vermont Attorney General
  9. United States23 Oct 2026Alabama Fire CollegeThe source does not say how they got in.Vermont Attorney General
  10. United States23 Oct 2026UltraMobile ImagingThe source does not say how they got in.HIPAA Journal
  11. United States23 Oct 2026Washington GastroenterologyThe source does not say how they got in.HIPAA Journal
  12. United States23 Oct 2026Tarter Krinsky & DroginThe source does not say how they got in.HIPAA Journal
High1 Feb 2026
Anthem (Conduent)
Healthcare · Records not stated
Data breach impacts some Anthem members; Conduent confirms breach is contained with no evidence of misuse
1 Feb 2026
Medium1 Feb 2026
Conduent/Anthem
Healthcare · Records not stated
Data breach impacted some Anthem members; Conduent reports breach contained with no evidence of misuse
1 Feb 2026
Critical1 Feb 2026
Conduent
Sector not stated · 25,000,000 records
At least 25 million people had personal data stolen; printing, payment, and document services company
1 Feb 2026
Critical1 Feb 2026
Mexican Government
Government · Records not stated
Hacker exploited AI tools (Claude Code, ChatGPT) to breach 9 federal agencies; millions of records stolen
1 Feb 2026
High1 Feb 2026
Bank of Baroda
Finance · Records not stated
Data breach affecting banking customers in India
1 Feb 2026
Critical1 Feb 2026
Multiple Email Providers
Technology · 149,000,000 records
149 million passwords exposed including 48 million Gmail accounts in massive credential leak
1 Feb 2026
Critical1 Feb 2026
Generic Credential Dump
Technology · 149,000,000 records
149 million passwords exposed including 48 million Gmail accounts
1 Feb 2026
Critical1 Feb 2026
Multiple Email/Password Database
Technology · Records not stated
149 million stolen passwords exposed, including 48 million Gmail accounts
1 Feb 2026
Critical1 Feb 2026
Unknown (Credential compilation)
Technology · Records not stated
149 million stolen passwords exposed publicly, including 48 million Gmail accounts
1 Feb 2026
High1 Feb 2026
Anthem (Conduent)
Healthcare · Records not stated
Data breach impacting Anthem members; contained with no evidence of misuse or public release
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack disrupted access to patient records and clinical operations
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack affecting patient records, clinics offline for over a week
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack disrupted patient record access and clinic operations for over a week
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack caused clinic closures and disrupted patient records access for over a week
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack disrupted patient record access and clinics operations
1 Feb 2026
Critical1 Feb 2026
Credential Database
Technology · Records not stated
Database containing 149 million stolen passwords exposed publicly, including 48 million Gmail accounts
1 Feb 2026
Critical1 Feb 2026
Multiple Organizations (Credential Compilation)
Technology · 149,000,000 records
Massive credential leak exposing 149 million passwords including 48 million Gmail accounts and other platform credentials
1 Feb 2026
High1 Feb 2026
Munson Healthcare
Healthcare · 120,000 records
120,000 patients' data compromised in data breach involving one of their service providers
1 Feb 2026
Critical1 Feb 2026
Mexican Federal Government Agencies
Government · Records not stated
Hacker breached 9 Mexican government agencies using Claude Code and ChatGPT, exploiting AI tools posing as bug bounty participant
1 Feb 2026
Critical1 Feb 2026
Multiple platforms
Technology · Records not stated
149 million stolen passwords exposed publicly including 48 million Gmail accounts
1 Feb 2026
Critical1 Feb 2026
Credential database (massive leak)
Sector not stated · Records not stated
149 million stolen passwords exposed publicly, including 48 million Gmail accounts
1 Feb 2026
Critical1 Feb 2026
Massive Credential Compilation
Technology · 149,000,000 records
149 million passwords exposed including 48 million Gmail accounts publicly exposed
1 Feb 2026
Critical1 Feb 2026
Credential database (unnamed)
Sector not stated · 149,000,000 records
149 million passwords exposed in massive credential leak, including 48 million Gmail accounts
1 Feb 2026
Critical1 Feb 2026
Credential Database (Unknown Source)
Technology · Records not stated
149 million stolen passwords publicly exposed, including 48 million Gmail accounts
1 Feb 2026
Were you affected?