Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,491
Disclosures in the tracker, all years
2,079
Of those, indexed in 2026
141
Added in October
18
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 30 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

76 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States28 Oct 2026Legacy CooperativeThe source does not say how they got in.Vermont Attorney General
  2. United States28 Oct 2026Metro Tulsa Foot & Ankle SpecialistThe source does not say how they got in.Vermont Attorney General
  3. United States28 Oct 2026Quantum Health, Inc.The source does not say how they got in.Vermont Attorney General
  4. United States27 Oct 2026Directed Trust CompanyThe source does not say how they got in.Vermont Attorney General
  5. United States27 Oct 2026NorthShore Health CentersThe source does not say how they got in.HIPAA Journal
  6. United States27 Oct 2026University of New Mexico Health SystemThe source does not say how they got in.The Record
  7. United States26 Oct 2026Chisholm, Persson & Ball, P.C.The source does not say how they got in.Vermont Attorney General
  8. United States26 Oct 2026Alpha Omega Alpha Honor Medical SocietyThe source does not say how they got in.Vermont Attorney General
  9. United States26 Oct 2026USForex Inc.The source does not say how they got in.California Attorney General
  10. United States26 Oct 2026Monmouth UniversityThe source does not say how they got in.Vermont Attorney General
  11. United States26 Oct 2026Denver Health Medical PlanThe source does not say how they got in.HIPAA Journal
  12. United States24 Oct 2026Brooklyn Counseling ServicesThe source does not say how they got in.Vermont Attorney General
High1 Sep 2025
Stellantis
Technology · Records not stated
Unauthorized access affecting North American customer data through provider breach
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Finance · 160,000,000 records
The disclosure as indexed does not name the organisation.
ShinyHunters exfiltrated over 160 million records from Vietnam's financial system databases
1 Sep 2025
Critical1 Sep 2025
Federal Agency (GeoServer)
Government · Records not stated
Attackers breached federal agency via critical GeoServer flaw CVE-2024-36401
1 Sep 2025
High1 Sep 2025
FinWise Bank
Finance · 689,000 records
Insider breach exposed 689,000 customer records
1 Sep 2025
High1 Sep 2025
MedicSolution
Healthcare · Records not stated
KillSec ransomware attack on healthcare software solutions provider
1 Sep 2025
Critical1 Sep 2025
Organisation not named
Finance · 160,000,000 records
The disclosure as indexed does not name the organisation.
ShinyHunters exfiltrated over 160 million records from CIC databases
1 Sep 2025
Critical1 Sep 2025
FinWise
Finance · 689,000 records
Former employee accessed unencrypted data affecting 689,000 users
1 Sep 2025
High1 Sep 2025
Giglio
Retail · 1,026,468 records
1,026,468 records exposed, Email addresses, Names, Phone numbers, Physical addresses
1 Sep 2025
Medium27 Aug 2025
TheSqua.re
Technology · 107,041 records
107,041 records exposed, Email addresses, Geographic locations, Names, Phone numbers
27 Aug 2025
High18 Aug 2025
Allianz Life
Technology · 1,115,061 records
1,115,061 records exposed, Dates of birth, Email addresses, Genders, Names and 2 more
18 Aug 2025
High8 Aug 2025
Unigame
Technology · 843,696 records
843,696 records exposed, Email addresses, Passwords
8 Aug 2025
High1 Aug 2025
Workday
Technology · Records not stated
HR giant hackers steal personal data in recent breach
1 Aug 2025
High1 Aug 2025
Cerner
Healthcare · Records not stated
Unauthorized third party accessed health records; breach affected Huntsville Hospital and other health systems
1 Aug 2025
High1 Aug 2025
Workday
Technology · Records not stated
HR giant; hackers stole personal data in recent breach
1 Aug 2025
High1 Aug 2025
Workday
Technology · Records not stated
Hackers stole personal data in recent breach
1 Aug 2025
High1 Aug 2025
US Bank
Finance · Records not stated
Data breach following LockBit ransomware attack with threat to publish stolen data
1 Aug 2025
Critical1 Aug 2025
TransUnion
Finance · 4,400,000 records
Data breach with hackers stealing 4.4 million customers' personal information
1 Aug 2025
High1 Aug 2025
Workday
Technology · Records not stated
HR giant's breach exposed employee and customer personal data
1 Aug 2025
Critical1 Aug 2025
Organisation not named
Healthcare · 1,150,000 records
The disclosure as indexed does not name the organisation.
Ransomware attack in August 2025 affected 1.15 million individuals
1 Aug 2025
High1 Aug 2025
Workday
Technology · Records not stated
HR giant hackers stole personal data in recent breach
1 Aug 2025
High1 Aug 2025
Jaguar Land Rover
Sector not stated · Records not stated
Cyberattack in August stole data related to current and former employees and contractors
1 Aug 2025
Critical1 Aug 2025
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Breached via private APN; facility supplies heat to approximately 50,000 residents
1 Aug 2025
Critical1 Aug 2025
Polish Energy Plant
Government · Records not stated
Heat-and-power facility breached via private APN, supplies 50,000 residents
1 Aug 2025
High1 Aug 2025
Cerner (Huntsville Hospital)
Healthcare · Records not stated
Unauthorized third party accessed patient electronic health records via vendor system
1 Aug 2025
Were you affected?