Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,314
Disclosures in the tracker, all years
2,028
Of those, indexed in 2026
76
Added in October
21
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 21 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

73 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States20 Oct 2026Chevy Chase ClubThe source does not say how they got in.Vermont Attorney General
  2. United States20 Oct 2026Paradigm Healthcare ServicesThe source does not say how they got in.SecurityWeek
  3. United States19 Oct 2026Computer Task Group, IncorporatedThe source does not say how they got in.Vermont Attorney General
  4. United States19 Oct 2026Citizens BankThe source does not say how they got in.California Attorney General
  5. United States19 Oct 2026STS Aviation GroupThe source does not say how they got in.California Attorney General
  6. United States18 Oct 2026Stitch Connect IncThe source does not say how they got in.California Attorney General
  7. United States17 Oct 2026Catawba CountyThe source does not say how they got in.Vermont Attorney General
  8. United States16 Oct 2026CDEHow they got in: stolen or reused passwords.California Attorney General
  9. United States16 Oct 2026A telecom managed service providerHow they got in: a known flaw in software the victim ran.Security Affairs
  10. United States16 Oct 2026Johnson Investment CounselThe source does not say how they got in.Vermont Attorney General
  11. United States16 Oct 2026BBC International LLCThe source does not say how they got in.Vermont Attorney General
  12. United States16 Oct 2026Ganxxet, Inc.The source does not say how they got in.Vermont Attorney General
High8 Feb 2020
Redcar and Cleveland Council
Government · Records not stated
Ransomware disrupted council services for 3+ months, estimated 10M GBP recovery
Our record
8 Feb 2020
Critical6 Feb 2020
Adult FriendFinder (2016)
Retail · 169,746,810 records
169,746,810 records exposed, Email addresses, Passwords, Spoken languages, Usernames
Our record
6 Feb 2020
High6 Feb 2020
NTT Communications (Japan)
Technology · Records not stated
900 corporate customer records compromised in targeted breach
Our record
6 Feb 2020
High4 Feb 2020
CSC (Denmark IT Provider)
Government · Records not stated
2.5TB of Danish citizen data stolen from government IT outsourcer
Our record
4 Feb 2020
Critical4 Feb 2020
Anthem Inc (BCBS)
Healthcare · 78,800,000 records
78.8M records, largest healthcare breach in US history at the time
Our record
4 Feb 2020
High3 Feb 2020
Edenred (France)
Finance · Records not stated
Clop ransomware targeted French payment solutions provider
Our record
3 Feb 2020
High3 Feb 2020
NEC Corporation (Japan)
Sector not stated · 28,000 records
Defense division compromised by state-sponsored actors, 28,000 files accessed
Our record
3 Feb 2020
High30 Jan 2020
Bouygues Construction (France)
Sector not stated · Records not stated
Maze ransomware stole data from French construction conglomerate
Our record
30 Jan 2020
Medium29 Jan 2020
Midwest Transplant Network
Healthcare · 17,000 records
17K patient records exposed in Maze ransomware
Our record
29 Jan 2020
High28 Jan 2020
DailyObjects
Retail · 464,260 records
464,260 records exposed, Email addresses, Names, Passwords, Phone numbers and 1 more
Our record
28 Jan 2020
Critical28 Jan 2020
Wawa
Retail · Records not stated
30M payment card records stolen in point-of-sale malware
Our record
28 Jan 2020
High25 Jan 2020
Tout
Retail · 652,683 records
652,683 records exposed, Bios, Email addresses, Geographic locations, IP addresses and 3 more
Our record
25 Jan 2020
High24 Jan 2020
Beaumont Health
Healthcare · 112,000 records
112K patient records exposed in phishing incident
Our record
24 Jan 2020
High22 Jan 2020
Tillamook County OR
Government · Records not stated
Ransomware shut down county government for weeks
Our record
22 Jan 2020
High22 Jan 2020
Ambry Genetics
Healthcare · 233,000 records
233K patient genetic testing records exposed in email breach
Our record
22 Jan 2020
Critical20 Jan 2020
Mitsubishi Electric (Japan)
Sector not stated · Records not stated
Chinese APT stole defense and infrastructure data, 8,000 employee records
Our record
20 Jan 2020
Critical20 Jan 2020
Astoria Company
Technology · Records not stated
40M consumer marketing records exposed in misconfigured S3
Our record
20 Jan 2020
Critical20 Jan 2020
Heartland Payment Systems
Finance · Records not stated
130M credit card numbers exposed, one of largest financial breaches
Our record
20 Jan 2020
High15 Jan 2020
europa.jobs
Technology · 226,095 records
226,095 records exposed, Dates of birth, Email addresses, Geographic locations, Job applications and 4 more
Our record
15 Jan 2020
Critical15 Jan 2020
Adult Friend Finder
Technology · 340,000,000 records
340M user records exposed in historical breach data resurfacing
Our record
15 Jan 2020
Critical15 Jan 2020
Inmediata Health Group
Healthcare · 1,570,000 records
1.57M patient records exposed via website misconfiguration
Our record
15 Jan 2020
High12 Jan 2020
Planet Calypso
Retail · 62,261 records
62,261 records exposed, Email addresses, IP addresses, Passwords, Usernames
Our record
12 Jan 2020
Critical11 Jan 2020
Go Games
Retail · 3,430,083 records
3,430,083 records exposed, Email addresses, IP addresses, Passwords, Usernames
Our record
11 Jan 2020
Medium11 Jan 2020
BtoBet
Finance · 444,241 records
444,241 records exposed, Dates of birth, Email addresses, Financial transactions, Geographic locations and 3 more
Our record
11 Jan 2020
Were you affected?