Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,307
Disclosures in the tracker, all years
2,021
Of those, indexed in 2026
71
Added in October
20
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 20 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

69 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States20 Oct 2026Paradigm Healthcare ServicesThe source does not say how they got in.SecurityWeek
  2. United States19 Oct 2026Computer Task Group, IncorporatedThe source does not say how they got in.Vermont Attorney General
  3. United States19 Oct 2026Citizens BankThe source does not say how they got in.California Attorney General
  4. United States19 Oct 2026STS Aviation GroupThe source does not say how they got in.California Attorney General
  5. United States18 Oct 2026Stitch Connect IncThe source does not say how they got in.California Attorney General
  6. United States17 Oct 2026Catawba CountyThe source does not say how they got in.Vermont Attorney General
  7. United States16 Oct 2026A telecom managed service providerHow they got in: a known flaw in software the victim ran.Security Affairs
  8. United States16 Oct 2026Bankruptcy Noticing CenterThe source does not say how they got in.Infosecurity Magazine
  9. United States16 Oct 2026American Collection Medical AgencyThe source does not say how they got in.HIPAA Journal
  10. United States16 Oct 2026Mid Florida Dermatology & Plastic SurgeryThe source does not say how they got in.HIPAA Journal
  11. United States16 Oct 2026Anne Arundel CountyThe source does not say how they got in.The Record
  12. United States15 Oct 2026BAE SystemsThe source does not say how they got in.The Record
High9 Aug 2026
Tribeca Festival
Sector not stated · Records not stated
Data leak exposed contact information for celebrities and hundreds of thousands of records
9 Aug 2026
Critical9 Aug 2026
Facebook
Technology · 1,000,000,000 records
Multiple major data breaches since 2013 exposed over 1 billion records
9 Aug 2026
Critical9 Aug 2026
Unlimited Technology Systems
Healthcare · 3,800,000 records
3.8 million people impacted in healthcare software company breach
9 Aug 2026
High9 Aug 2026
Quantum Health
Healthcare · Records not stated
Healthcare advocacy vendor breach exposed employees' SSNs via New Era Technology
9 Aug 2026
High9 Aug 2026
100K officer contact records leaked
Government · Records not stated
100K officer contact records leaked
9 Aug 2026
High9 Aug 2026
100K officer and staff contacts leaked
Government · Records not stated
100K officer and staff contacts leaked
9 Aug 2026
Critical9 Aug 2026
100K officer and staff records exfiltrated
Government · Records not stated
100K officer and staff records exfiltrated
9 Aug 2026
High9 Aug 2026
Bank of Baroda
Finance · Records not stated
Alleged major cyberattack representing one of India's biggest corporate data breaches
9 Aug 2026
Critical9 Aug 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patients exposed in PEAR ransomware attack on healthcare billing company
9 Aug 2026
Critical9 Aug 2026
100K+ officer and staff records leaked
Government · Records not stated
100K+ officer and staff records leaked
9 Aug 2026
Critical9 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Used China-made malware USB drives on classified networks, breach unnoticed for nearly a year
9 Aug 2026
Critical9 Aug 2026
CareCloud Health Tech
Healthcare · 345,000 records
345K patient SSNs and medical records stolen
9 Aug 2026
Critical9 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Thousands of civil servants' passwords exposed, including White House credentials
9 Aug 2026
Critical9 Aug 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patients exposed in PEAR ransomware attack on healthcare billing company
9 Aug 2026
Critical9 Aug 2026
Instructure (Canvas)
Education · Records not stated
Supply chain breach generating over half of all breach notices in 2026
9 Aug 2026
High9 Aug 2026
Clinton Health Access Initiative
Healthcare · Records not stated
Ransomware attack by INC_RANSOM group
9 Aug 2026
Critical9 Aug 2026
Conduent Business Services
Healthcare · 62,200,000 records
62.2M records exposed in healthcare breach
9 Aug 2026
Medium9 Aug 2026
Alcon
Healthcare · 218,395 records
218,395 records exposed, Email addresses, Names, Phone numbers, Physical addresses
9 Aug 2026
High9 Aug 2026
Breach
Healthcare · Records not stated
Breach exposed personal and medical information including Social Security numbers
9 Aug 2026
Critical9 Aug 2026
Basic-Fit
Sector not stated · Records not stated
1M members bank and personal data breached
9 Aug 2026
Critical9 Aug 2026
100K+ officer and staff records exposed
Government · Records not stated
100K+ officer and staff records exposed
9 Aug 2026
Critical9 Aug 2026
Marquis Fintech
Finance · Records not stated
800K personal and financial records compromised
9 Aug 2026
Critical9 Aug 2026
US Homeland Security Network
Government · Records not stated
Sensitive gov agency data accessed via HSIN platform
9 Aug 2026
Critical9 Aug 2026
135K law enforcement contact records leaked
Government · Records not stated
135K law enforcement contact records leaked
9 Aug 2026
Were you affected?