Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,306
Disclosures in the tracker, all years
2,020
Of those, indexed in 2026
69
Added in October
19
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 20 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

68 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States20 Oct 2026Paradigm Healthcare ServicesThe source does not say how they got in.SecurityWeek
  2. United States19 Oct 2026Computer Task Group, IncorporatedThe source does not say how they got in.Vermont Attorney General
  3. United States19 Oct 2026Citizens BankThe source does not say how they got in.California Attorney General
  4. United States19 Oct 2026STS Aviation GroupThe source does not say how they got in.California Attorney General
  5. United States18 Oct 2026Stitch Connect IncThe source does not say how they got in.California Attorney General
  6. United States17 Oct 2026Catawba CountyThe source does not say how they got in.Vermont Attorney General
  7. United States16 Oct 2026Bankruptcy Noticing CenterThe source does not say how they got in.Infosecurity Magazine
  8. United States16 Oct 2026American Collection Medical AgencyThe source does not say how they got in.HIPAA Journal
  9. United States16 Oct 2026Mid Florida Dermatology & Plastic SurgeryThe source does not say how they got in.HIPAA Journal
  10. United States16 Oct 2026Anne Arundel CountyThe source does not say how they got in.The Record
  11. United States15 Oct 2026BAE SystemsThe source does not say how they got in.The Record
  12. United States15 Oct 2026DentaQuestThe source does not say how they got in.HIPAA Journal
Critical11 Aug 2026
100K+ officer records and PII exposed
Government · Records not stated
100K+ officer records and PII exposed
11 Aug 2026
Medium11 Aug 2026
BudBoard Cannabis Platform
Technology · Records not stated
Dispensary data exposed via Firebase misconfiguration
11 Aug 2026
Medium11 Aug 2026
Universidad Adolfo Ibanez
Education · Records not stated
User and faculty records exfiltrated and leaked
11 Aug 2026
Critical11 Aug 2026
100K+ officer identities and contact data leaked
Government · Records not stated
100K+ officer identities and contact data leaked
11 Aug 2026
Critical11 Aug 2026
CareCloud Health Tech
Healthcare · 345,000 records
345K patient SSNs and payment data exfiltrated
11 Aug 2026
Critical11 Aug 2026
Snowflake Platform (Moucka)
Technology · 165,000,000 records
Billions of records stolen from 165 organizations
11 Aug 2026
Critical11 Aug 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
Massive identity-based attacks compromised 165 organizations; Canadian hacker pleaded guilty to fraud and extortion
11 Aug 2026
Critical11 Aug 2026
Japan Ground Self-Defense Force
Government · Records not stated
Used China-made malware-infected USB drives on classified networks, breach unnoticed for nearly a year
11 Aug 2026
Critical11 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Thousands of civil servants' passwords and White House-linked passwords exposed since early 2024
11 Aug 2026
High11 Aug 2026
Switzerland Federal IT Office
Government · Records not stated
SharePoint breach hit 200 government accounts
11 Aug 2026
Critical11 Aug 2026
Figure Technology Solutions
Finance · 967,000 records
967K accounts leaked with PII
11 Aug 2026
Critical11 Aug 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
The hackers claimed to have exfiltrated 6 terabytes of data, including highly sensitive health information like records related to sexual assault, mental health, abortions and sexual harassment incidents.
11 Aug 2026
Critical11 Aug 2026
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
The ransomware group known as DeadLock has been observed using decentralized infrastructure to facilitate victim communications and data leak operations in a bid to improve operational resilience. "Its recovery…
11 Aug 2026
Medium11 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Supply chain attack and data breach at Ceva Logistics appears to have a large blast radius
11 Aug 2026
Medium11 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
A malicious tool server connected to an AI coding assistant can quietly walk off with SSH keys, environment secrets, source code, and customer data without ever sending one obviously harmful instruction. The trick can…
11 Aug 2026
Medium11 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Operations at eight European warehouses belonging to France's CEVA Logistics have reportedly been disrupted by a cyberattack, and several other companies are feeling the effects.
11 Aug 2026
Critical11 Aug 2026
Ransomware attack in 2025
Healthcare · 1,200,000 records
Ransomware attack in 2025 exposed personal data of 1.2 million people
11 Aug 2026
High11 Aug 2026
Craneware
Healthcare · Records not stated
Healthcare software vendor data breach exposing customer data in supply-chain attack
11 Aug 2026
Critical11 Aug 2026
VITAS Hospice Services
Healthcare · 319,000 records
319K patient records stolen via vendor account
11 Aug 2026
Critical11 Aug 2026
CareCloud Health Software
Healthcare · 345,000 records
345K patient records stolen from EHR systems
11 Aug 2026
Critical11 Aug 2026
100K+ police officer records exfiltrated
Government · Records not stated
100K+ police officer records exfiltrated
11 Aug 2026
High11 Aug 2026
Cure Dental
Healthcare · Records not stated
Dental provider data breach exposed PII of current and former patients
11 Aug 2026
Critical11 Aug 2026
MCBS
Healthcare · 1,200,000 records
Medical business management company data breach exposed personal information of 1.2 million individuals
11 Aug 2026
Critical11 Aug 2026
135K law enforcement contact records exfiltrated
Government · Records not stated
135K law enforcement contact records exfiltrated
11 Aug 2026
Were you affected?