Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,366
Disclosures in the tracker, all years
2,080
Of those, indexed in 2026
139
Added in October
18
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 29 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

76 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States28 Oct 2026Legacy CooperativeThe source does not say how they got in.Vermont Attorney General
  2. United States28 Oct 2026Metro Tulsa Foot & Ankle SpecialistThe source does not say how they got in.Vermont Attorney General
  3. United States28 Oct 2026Quantum Health, Inc.The source does not say how they got in.Vermont Attorney General
  4. United States27 Oct 2026Directed Trust CompanyThe source does not say how they got in.Vermont Attorney General
  5. United States27 Oct 2026NorthShore Health CentersThe source does not say how they got in.HIPAA Journal
  6. United States27 Oct 2026University of New Mexico Health SystemThe source does not say how they got in.The Record
  7. United States26 Oct 2026Chisholm, Persson & Ball, P.C.The source does not say how they got in.Vermont Attorney General
  8. United States26 Oct 2026Alpha Omega Alpha Honor Medical SocietyThe source does not say how they got in.Vermont Attorney General
  9. United States26 Oct 2026USForex Inc.The source does not say how they got in.California Attorney General
  10. United States26 Oct 2026Monmouth UniversityThe source does not say how they got in.Vermont Attorney General
  11. United States26 Oct 2026Denver Health Medical PlanThe source does not say how they got in.HIPAA Journal
  12. United States24 Oct 2026Brooklyn Counseling ServicesThe source does not say how they got in.Vermont Attorney General
Critical1 Oct 2025
Blue Cross Blue Shield
Healthcare · Records not stated
Massive data breach of healthcare provider; company allegedly delayed reporting
1 Oct 2025
Critical1 Oct 2025
Canadian Tire
Retail · 38,000,000 records
E-commerce database breach exposed personal data and encrypted passwords of 38 million accounts
1 Oct 2025
Critical1 Oct 2025
Capita
Sector not stated · 6,600,000 records
6.6 million records exposed due to 58-hour delay in breach response, resulting in £14M fine
1 Oct 2025
High1 Oct 2025
Salesforce
Technology · Records not stated
Attackers used social engineering and OAuth exploits to breach customer data
1 Oct 2025
High1 Oct 2025
Capita
Sector not stated · Records not stated
Customer data breach resulting in ICO fine of £14 million for GDPR infringements
1 Oct 2025
Critical1 Oct 2025
Canadian Tire
Retail · 38,000,000 records
E-commerce database breach exposed names, addresses, emails, birth years of 38 million customer accounts
1 Oct 2025
Critical1 Oct 2025
PNC Financial Services Group
Finance · 740,000 records
Data breach exposed 740,000 records of personally identifiable information; class action filed.
1 Oct 2025
Critical1 Oct 2025
Unlimited Technology Systems
Healthcare · Records not stated
Revenue cycle management provider breach exposed 3.8 million healthcare patients' information including personal and medical data.
1 Oct 2025
High1 Oct 2025
Motility
Technology · Records not stated
Ransomware attack where hackers encrypted servers supporting car dealership software operations
1 Oct 2025
High1 Oct 2025
Salesforce
Technology · Records not stated
Attackers used social engineering and OAuth exploits to breach systems and access customer data
1 Oct 2025
High1 Oct 2025
Mango
Retail · Records not stated
Spanish fast-fashion retailer; limited customer information exposed via external marketing provider breach
1 Oct 2025
Critical1 Oct 2025
Canadian Tire
Retail · 38,000,000 records
38 million customer accounts exposed including names, addresses, emails, birth years, encrypted passwords
1 Oct 2025
Critical1 Oct 2025
PNC Financial Services Group
Finance · 740,000 records
Data breach exposing 740,000 customer records with inadequate security measures
1 Oct 2025
Critical1 Oct 2025
Unlimited Technology Systems
Healthcare · Records not stated
Revenue cycle management provider exposed 3.8 million healthcare patients' information
1 Oct 2025
Critical1 Oct 2025
Multiple (Email Password Leak)
Technology · 183,000,000 records
183 million email passwords exposed including tens of millions Gmail accounts
1 Oct 2025
High1 Oct 2025
U.S. Government
Government · 53,070 records
Password exposure revealed 53,070 passwords associated with U.S. government email domains exposed since 2024
1 Oct 2025
Critical1 Oct 2025
Multiple (Email Passwords)
Technology · 183,000,000 records
183 million email passwords exposed, including tens of millions Gmail accounts
1 Oct 2025
Critical1 Oct 2025
Unknown (Email providers)
Technology · 183,000,000 records
183 million email passwords exposed, including tens of millions Gmail accounts
1 Oct 2025
Critical1 Oct 2025
Conduent Business Services, LLC
Sector not stated · 10,515,849 records
Data breach compromised sensitive information of 10,515,849 individuals; millions notified a year later
1 Oct 2025
Critical1 Oct 2025
U.S. Government Civil Servants
Government · Records not stated
Thousands of civil servants' passwords exposed since early 2024, including White House credentials
1 Oct 2025
Critical1 Oct 2025
Multiple (Email Providers)
Technology · 183,000,000 records
183 million email passwords exposed including tens of millions Gmail accounts
1 Oct 2025
Critical1 Oct 2025
Email Password Leak (183M)
Sector not stated · 183,000,000 records
183 million email passwords exposed including tens of millions of Gmail accounts
1 Oct 2025
Critical1 Oct 2025
Organisation not named
Finance · 740,000 records
The disclosure as indexed does not name the organisation.
Class action lawsuit alleges failure to secure 740,000 records containing personally identifiable information
1 Oct 2025
Critical1 Oct 2025
UK Government Civil Service
Government · Records not stated
Thousands of civil servants' passwords exposed since early 2024, including White House-linked credentials
1 Oct 2025
Were you affected?