Weekly briefing No. 41 published 4 Oct 2026
Disclosure tracker › Technology disclosures
Intelligence · Disclosure tracker

Technology disclosures

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,292
Disclosures in the tracker, all years
2,005
Of those, indexed in 2026
50
Added in October
9
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 18 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

3,895 results · Technology disclosures. Clear filters

High31 Jul 2026
Gaming Accounts (Multiple)
Technology · Records not stated
11 million gaming account credentials exposed
31 Jul 2026
Critical31 Jul 2026
Charter Spectrum
Technology · 42,000,000 records
Data breach exposed 4.9M confirmed accounts; ShinyHunters claims 42M records stolen
31 Jul 2026
Critical31 Jul 2026
AT&T
Technology · 109,000,000 records
Data breach exposed data from over 100 million customers across two separate incidents in 2024
31 Jul 2026
High31 Jul 2026
Stack Sports
Technology · Records not stated
Sports platform data breach exposed payment details and bank account information for users
31 Jul 2026
Medium31 Jul 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
Less than two weeks after OpenAI disclosed that an experimental AI model breached Hugging Face during a cybersecurity evaluation, Anthropic has revealed that its own review uncovered three incidents in which Claude…
31 Jul 2026
Medium28 Jul 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
EY confirmed the theft of client tax documents from its third-party support platform. ShinyHunters claims responsibility and is threatening to publish the data.
28 Jul 2026
High25 Jul 2026
Jessica Lyons
Technology · Records not stated
Jessica Lyons reports on today’s entry in the “No Need to Hack When It’s Leaking” files: Click To Pray, a prayer app endorsed by the Pope with hundreds of thousands of users worldwide, has…
25 Jul 2026
Medium24 Jul 2026
Chick-fil-A has
Technology · 13,000 records
Chick-fil-A has confirmed that over 13,000 customers had their accounts breached in a wave of credential stuffing attacks targeting its website and mobile app between June 17 and June 19.
24 Jul 2026
Critical24 Jul 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
Previous reporting about the Navigate360 breach focused on tips submitted by students, teachers, and parents. In this article, we focus on tips submitted to Crime Stoppers and law enforcement-related programs that use…
24 Jul 2026
Medium22 Jul 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
It’s happened. The nightmare of the future is now in our present. Or was this just old-fashioned negligence? Lily Hay Newman and Dell Cameron report: OpenAI disclosed on Tuesday that it lost control of two AI…
22 Jul 2026
Medium20 Jul 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
A newly discovered espionage implant has been using a hijacked Microsoft 365 calendar as its command channel, planting operator instructions and smuggling out stolen files as attachments on calendar events dated to the…
20 Jul 2026
Medium20 Jul 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
Craneware, which is headquartered in Edinburgh and listed on London's AIM market, told investors it detected unauthorized access to a “subset” of its data environment and has since brought in outside…
20 Jul 2026
Medium17 Jul 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
A Go botnet called NadMesh turned up in early July hunting exposed AI services, and the operator's own dashboard claims 3,811 unique AWS keys. A public internet indexes harvester keeps the scan queue stocked with ComfyUI, Ollama, n8n…
17 Jul 2026
Medium14 Jul 2026
Attackers whose methods line up with the data-extortion
Technology · Records not stated
Attackers whose methods line up with the data-extortion group ShinyHunters have spent the past year walking into corporate Salesforce environments without exploiting a single flaw in the platform. The way in…
14 Jul 2026
Medium13 Jul 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
The retailer said the incident did not affect its online shopping platform itself but involved a separately stored customer database maintained by a third-party provider. According to notifications sent to Lidl's…
13 Jul 2026
Medium9 Jul 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
A cloud intrusion that ended with the deployment of cryptomining malware has exposed a bigger risk for enterprises: AI gateways that concentrate access to cloud identities, permissions, and foundation models in a…
9 Jul 2026
Critical9 Jul 2026
KDDI Six ISPs
Technology · 14,200,000 records
14.2M email credentials exposed including plaintext passwords
9 Jul 2026
Critical9 Jul 2026
Charter Spectrum
Technology · 13,000,000 records
13M customer records leaked post-ransom refusal
9 Jul 2026
Critical9 Jul 2026
Charter Communications Spectrum
Technology · 40,000,000 records
40M customer records stolen via vishing attack
9 Jul 2026
Critical9 Jul 2026
Credential Dump Global
Technology · Records not stated
24B stolen credentials exposed in public database
9 Jul 2026
Critical9 Jul 2026
Charter Communications
Technology · 40,000,000 records
40M customer records exfiltrated by ShinyHunters
9 Jul 2026
Critical9 Jul 2026
Global Credential Mega-Dump
Technology · 24,000,000,000 records
24B credential records from 36 infostealer sources
9 Jul 2026
Critical9 Jul 2026
Oracle PeopleSoft CVE-2026-35273
Technology · 3,000,000 records
300+ instances hit, 100+ orgs, HR/payroll data stolen
9 Jul 2026
Critical9 Jul 2026
Klue Supply Chain Breach
Technology · Records not stated
200 firms hit via stolen OAuth tokens and CRM keys
9 Jul 2026
Were you affected?