Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,314
Disclosures in the tracker, all years
2,028
Of those, indexed in 2026
76
Added in October
22
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 20 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

69 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States20 Oct 2026Paradigm Healthcare ServicesThe source does not say how they got in.SecurityWeek
  2. United States19 Oct 2026Computer Task Group, IncorporatedThe source does not say how they got in.Vermont Attorney General
  3. United States19 Oct 2026Citizens BankThe source does not say how they got in.California Attorney General
  4. United States19 Oct 2026STS Aviation GroupThe source does not say how they got in.California Attorney General
  5. United States18 Oct 2026Stitch Connect IncThe source does not say how they got in.California Attorney General
  6. United States17 Oct 2026Catawba CountyThe source does not say how they got in.Vermont Attorney General
  7. United States16 Oct 2026A telecom managed service providerHow they got in: a known flaw in software the victim ran.Security Affairs
  8. United States16 Oct 2026Bankruptcy Noticing CenterThe source does not say how they got in.Infosecurity Magazine
  9. United States16 Oct 2026American Collection Medical AgencyThe source does not say how they got in.HIPAA Journal
  10. United States16 Oct 2026Mid Florida Dermatology & Plastic SurgeryThe source does not say how they got in.HIPAA Journal
  11. United States16 Oct 2026Anne Arundel CountyThe source does not say how they got in.The Record
  12. United States15 Oct 2026BAE SystemsThe source does not say how they got in.The Record
Critical8 Aug 2026
Snowflake via Connor Moucka
Technology · 165,000,000 records
Billions of records across 165 organizations stolen
8 Aug 2026
High8 Aug 2026
Pathstone Private Office
Finance · Records not stated
641K sensitive financial records stolen
8 Aug 2026
High8 Aug 2026
135K law enforcement contacts leaked dark web
Government · Records not stated
135K law enforcement contacts leaked dark web
8 Aug 2026
Critical8 Aug 2026
Amgen Pharmaceuticals
Healthcare · Records not stated
Patient and corporate data stolen from cloud systems
8 Aug 2026
Critical8 Aug 2026
100K+ officer and justice staff records leaked
Government · Records not stated
100K+ officer and justice staff records leaked
8 Aug 2026
High7 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
A recent wave of cyber attacks targeting financial services, private equity, and professional services has been attributed to a data extortion group known as UNC6671. "UNC6671 continues to rely on voice phishing…
7 Aug 2026
Critical7 Aug 2026
City of Coweta
Government · Records not stated
KTUL in Oklahoma reports: The City of Coweta says they are currently responding to a ransomware attack. According to officials, on Werdnesday, August 5, the City experienced at system-wide attack and immediately…
7 Aug 2026
High7 Aug 2026
Levi Strauss & Co.
Retail · Records not stated
Hackers used social engineering to steal corporate data from three employees
7 Aug 2026
High7 Aug 2026
Swiss Federal Government (BIT/FOITT)
Government · Records not stated
Hackers exploited Microsoft SharePoint vulnerabilities to breach servers and compromise 200 accounts
7 Aug 2026
High7 Aug 2026
Coinbase
Finance · Records not stated
Breach involving outsourcer fired HR employees investigating data theft; suspect retained data for 10,000+ customers
7 Aug 2026
Critical7 Aug 2026
Gaming Accounts (Multi-org)
Technology · Records not stated
11+ million gaming account credentials exposed through credential theft and infostealer malware
7 Aug 2026
High7 Aug 2026
Officer PII and justice partner emails
Government · Records not stated
Officer PII and justice partner emails exposed
7 Aug 2026
Medium7 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft attacks, known to impact Framework and Tally.
7 Aug 2026
Critical7 Aug 2026
Snowflake (165 breaches)
Technology · 165,000,000 records
Canadian hacker pleaded guilty to hacking data storage platform; 165 breaches resulted, 100M+ people affected
7 Aug 2026
High7 Aug 2026
Marquis (fintech firm)
Finance · 672,000 records
Ransomware attack stole names, addresses, card numbers and sensitive data affecting 672,000 records
7 Aug 2026
Critical7 Aug 2026
Snowflake (multiple customers)
Technology · 165,000,000 records
165+ breaches resulted from Snowflake hacking conspiracy affecting 100M+ people
7 Aug 2026
High7 Aug 2026
Yearslong data breach
Healthcare · Records not stated
Yearslong data breach exposed residents' private health-related information
7 Aug 2026
Critical7 Aug 2026
TriZetto (duplicate confirmation)
Healthcare · 3,400,000 records
Confirmed year-long hack of network exposed records on 3.4 million people
7 Aug 2026
Critical7 Aug 2026
Blue Cross Blue Shield
Healthcare · Records not stated
Massive data breach affecting health and insurance information; company delayed reporting to regulators
7 Aug 2026
Critical7 Aug 2026
US Civil Service
Government · Records not stated
Thousands of civil servants' passwords exposed since early 2024, including White House-linked credentials
7 Aug 2026
Critical7 Aug 2026
Cyber attack
Government · 607,000 records
Cyber attack exposed approximately 607,000 records
7 Aug 2026
Critical7 Aug 2026
Snowflake (via hacks)
Technology · 165,000,000 records
165 breaches affecting over 100 million people via compromised Snowflake platform; Canadian hacker Connor Riley Moucka pleaded guilty
7 Aug 2026
High7 Aug 2026
TD Bank
Finance · Records not stated
Data security incident affecting customer information, separate newer breach in 2026
7 Aug 2026
Critical7 Aug 2026
Queensland Schools
Education · Records not stated
Major cyber breach affecting tens of thousands of students and teachers via education technology platform
7 Aug 2026
Were you affected?