Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,493
Disclosures in the tracker, all years
2,081
Of those, indexed in 2026
144
Added in October
21
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 30 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

76 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States28 Oct 2026Legacy CooperativeThe source does not say how they got in.Vermont Attorney General
  2. United States28 Oct 2026Metro Tulsa Foot & Ankle SpecialistThe source does not say how they got in.Vermont Attorney General
  3. United States28 Oct 2026Quantum Health, Inc.The source does not say how they got in.Vermont Attorney General
  4. United States27 Oct 2026Directed Trust CompanyThe source does not say how they got in.Vermont Attorney General
  5. United States27 Oct 2026NorthShore Health CentersThe source does not say how they got in.HIPAA Journal
  6. United States27 Oct 2026University of New Mexico Health SystemThe source does not say how they got in.The Record
  7. United States26 Oct 2026Chisholm, Persson & Ball, P.C.The source does not say how they got in.Vermont Attorney General
  8. United States26 Oct 2026Alpha Omega Alpha Honor Medical SocietyThe source does not say how they got in.Vermont Attorney General
  9. United States26 Oct 2026USForex Inc.The source does not say how they got in.California Attorney General
  10. United States26 Oct 2026Monmouth UniversityThe source does not say how they got in.Vermont Attorney General
  11. United States26 Oct 2026Denver Health Medical PlanThe source does not say how they got in.HIPAA Journal
  12. United States24 Oct 2026Brooklyn Counseling ServicesThe source does not say how they got in.Vermont Attorney General
Critical1 Jun 2025
Medical billing company (unnamed)
Healthcare · 1,300,000 records
2025 ransomware attack exposed protected health data on 1.3 million people, leaked to dark web
1 Jun 2025
Critical1 Jun 2025
Medical Billing Company
Healthcare · 1,300,000 records
2025 ransomware attack exposed protected health data on 1.3 million people, leaked to dark web
1 Jun 2025
Critical1 Jun 2025
Paraguay Government
Government · 7,400,000 records
7.4 million records containing PII of Paraguayan citizens offered for sale by cybercriminals
1 Jun 2025
Critical1 Jun 2025
Aflac
Finance · 1,300,000 records
Data breach exposed 22.65 million individual records in June 2025
1 Jun 2025
Critical1 Jun 2025
Ahold Delhaize
Retail · 2,200,000 records
Cyber-attack on US operations exposed personal data of over 2.2 million customers
1 Jun 2025
Critical27 May 2025
Free
Finance · 13,926,173 records
13,926,173 records exposed, Bank account numbers, Dates of birth, Genders, Names and 2 more
27 May 2025
Medium22 May 2025
Fédération Francaise de Rugby
Government · 281,977 records
281,977 records exposed, Dates of birth, Email addresses, Names, Phone numbers
22 May 2025
Critical8 May 2025
OnRPG
Retail · 1,047,640 records
1,047,640 records exposed, Email addresses, IP addresses, Passwords, Usernames
8 May 2025
High1 May 2025
Magna Hospitality Group
Sector not stated · Records not stated
Told state regulators an unauthorized actor copied files from its systems in May 2025; disclosure came about 17 months later.
1 May 2025
High1 May 2025
LexisNexis
Sector not stated · 364,000 records
Data broker breach exposed personal information of over 364,000 people
1 May 2025
Critical1 May 2025
Kettering Health
Healthcare · 1,700,000 records
Ransomware attack affected 1.7 million individuals, Ohio health system
1 May 2025
Critical1 May 2025
UK Legal Aid Agency
Government · Records not stated
Hackers accessed large amount of information from Ministry of Justice system
1 May 2025
High1 May 2025
Adidas
Retail · Records not stated
Cyberattack exposed customers' personal information and credit card data
1 May 2025
Medium1 May 2025
TehetségKapu
Education · 54,357 records
54,357 records exposed, Email addresses, Names, Usernames
1 May 2025
Medium1 May 2025
Harrods (UK)
Retail · Records not stated
Luxury retailer confirmed cyber incident, restricted internet access as precaution
1 May 2025
High30 Apr 2025
Co-op Group (UK)
Retail · Records not stated
Attempted cyberattack forced Co-op to shut down IT systems, operations disrupted
30 Apr 2025
High22 Apr 2025
Marks & Spencer Cyber Incident
Retail · Records not stated
Cyberattack disrupted online ordering and contactless payments across UK stores
22 Apr 2025
High22 Apr 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Cyberattack disrupted online ordering and contactless payments across UK stores
22 Apr 2025
High22 Apr 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Cyberattack disrupted online ordering and contactless payments across UK stores
22 Apr 2025
High22 Apr 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Cyberattack disrupted online ordering and contactless payments across UK stores
22 Apr 2025
High22 Apr 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Cyberattack disrupted online ordering and contactless payments across UK stores
22 Apr 2025
High22 Apr 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Cyberattack disrupted online ordering and contactless payments across UK stores
22 Apr 2025
High22 Apr 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Cyberattack disrupted online ordering and contactless payments across UK stores
22 Apr 2025
High22 Apr 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Cyberattack disrupted online ordering and contactless payments across UK stores
22 Apr 2025
Were you affected?