Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,366
Disclosures in the tracker, all years
2,080
Of those, indexed in 2026
139
Added in October
18
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 29 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

76 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States28 Oct 2026Legacy CooperativeThe source does not say how they got in.Vermont Attorney General
  2. United States28 Oct 2026Metro Tulsa Foot & Ankle SpecialistThe source does not say how they got in.Vermont Attorney General
  3. United States28 Oct 2026Quantum Health, Inc.The source does not say how they got in.Vermont Attorney General
  4. United States27 Oct 2026Directed Trust CompanyThe source does not say how they got in.Vermont Attorney General
  5. United States27 Oct 2026NorthShore Health CentersThe source does not say how they got in.HIPAA Journal
  6. United States27 Oct 2026University of New Mexico Health SystemThe source does not say how they got in.The Record
  7. United States26 Oct 2026Chisholm, Persson & Ball, P.C.The source does not say how they got in.Vermont Attorney General
  8. United States26 Oct 2026Alpha Omega Alpha Honor Medical SocietyThe source does not say how they got in.Vermont Attorney General
  9. United States26 Oct 2026USForex Inc.The source does not say how they got in.California Attorney General
  10. United States26 Oct 2026Monmouth UniversityThe source does not say how they got in.Vermont Attorney General
  11. United States26 Oct 2026Denver Health Medical PlanThe source does not say how they got in.HIPAA Journal
  12. United States24 Oct 2026Brooklyn Counseling ServicesThe source does not say how they got in.Vermont Attorney General
Critical1 Oct 2025
Blue Cross-Blue Shield
Healthcare · Records not stated
Massive data breach; lawsuit alleges company knew but delayed reporting
1 Oct 2025
Critical1 Oct 2025
Canadian Tire
Retail · 38,000,000 records
October 2025 breach exposed data from 38 million customer accounts including contact details and encrypted passwords
1 Oct 2025
Critical1 Oct 2025
Dublin Airport
Sector not stated · Records not stated
Everest ransomware group claimed theft of 1.5 million passenger records
1 Oct 2025
High1 Oct 2025
Capita
Technology · Records not stated
Data security breach resulting in £14 million fine from ICO for GDPR infringements
1 Oct 2025
Critical1 Oct 2025
Canadian Tire
Retail · 38,000,000 records
Data breach exposed personal information of 38 million customer accounts including contact details and encrypted passwords
1 Oct 2025
High1 Oct 2025
Capita
Technology · Records not stated
Data breach resulting in £14 million ICO fine for infringements of UK General Data Protection regulations
1 Oct 2025
Critical1 Oct 2025
Qantas
Sector not stated · 5,000,000 records
Hackers leaked 5 million customer records after ransom deadline passed; part of larger 40-company attack
1 Oct 2025
Critical1 Oct 2025
Blue Cross Blue Shield
Finance · Records not stated
Massive data breach with allegations company knew about it but delayed reporting; Montana investigation
1 Oct 2025
High1 Oct 2025
Mango Fashion Retailer
Retail · Records not stated
Spanish fast-fashion retailer's external marketing service provider suffered breach exposing limited customer information
1 Oct 2025
Critical1 Oct 2025
Canadian Tire
Retail · 38,000,000 records
October 2025 data breach affected 38 million customer accounts with personal and payment information
1 Oct 2025
Critical1 Oct 2025
Gmail/Google
Technology · 183,000,000 records
183 million email passwords exposed including millions of Gmail accounts through infostealer malware
1 Oct 2025
Critical1 Oct 2025
Toppan Next Tech
Technology · Records not stated
Breach affecting Singapore Police Force, DBS Bank, Bank of China, and Elections Commission
1 Oct 2025
Medium1 Oct 2025
Mango
Retail · Records not stated
External marketing service provider suffered breach exposing limited customer information
1 Oct 2025
Critical1 Oct 2025
Canadian Tire
Retail · 38,000,000 records
38 million customer accounts compromised in October 2025; contact details and encrypted passwords stolen
1 Oct 2025
Critical1 Oct 2025
Salesforce
Technology · 1,000,000,000 records
Hacking group claimed theft of 1 billion records from Salesforce customer databases
1 Oct 2025
Critical1 Oct 2025
Qantas
Sector not stated · 5,000,000 records
5 million customer records leaked after ransom deadline passed
1 Oct 2025
Critical1 Oct 2025
Blue Cross Blue Shield
Healthcare · Records not stated
Massive data breach affecting state's largest health insurance provider
1 Oct 2025
Critical1 Oct 2025
Canadian Tire
Retail · 38,000,000 records
38 million customer accounts breached; personal data, contact details, and encrypted passwords exposed in October 2025
1 Oct 2025
Critical1 Oct 2025
Salesforce
Technology · 1,000,000,000 records
Hacking group claims theft of 1 billion records from customer databases
1 Oct 2025
High1 Oct 2025
Qantas Airways
Sector not stated · Records not stated
Personal data of customers leaked online after being stolen in July 2025 cyberattack
1 Oct 2025
High1 Oct 2025
Capita
Sector not stated · Records not stated
Data breach resulting in £14 million fine from UK ICO for GDPR infringements
1 Oct 2025
High1 Oct 2025
Vietnam Airlines
Sector not stated · Records not stated
Data breach linked to global cyberattack affecting major companies including Qantas
1 Oct 2025
Critical1 Oct 2025
Qantas
Sector not stated · 5,000,000 records
5 million customer records leaked by Scattered Lapsus$ Hunters after ransom deadline passed
1 Oct 2025
Critical1 Oct 2025
Blue Cross Blue Shield
Healthcare · Records not stated
Massive data breach of healthcare provider; company allegedly delayed reporting
1 Oct 2025
Were you affected?