Weekly briefing No. 41 published 4 Oct 2026
Disclosure tracker › Disclosures in 2026
Intelligence · Disclosure tracker

Disclosures in 2026

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,280
Disclosures in the tracker, all years
1,993
Of those, indexed in 2026
39
Added in October
7
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 16 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

3,947 results · Disclosures in 2026. Clear filters

High1 Jun 2026
FirstClass (Australian travel agency)
Sector not stated · Records not stated
Customer records allegedly breached; threat actor claimed responsibility on underground forums
1 Jun 2026
Critical1 Jun 2026
Essex NHS
Healthcare · 900,000 records
Thousands of patient records stolen in cyber attack, breach disclosed 6+ months after notification
1 Jun 2026
High1 Jun 2026
Synnovis/Mid South Essex NHS
Healthcare · 900,000 records
Thousands of NHS patient records confirmed stolen in ransomware cyberattack
1 Jun 2026
High1 Jun 2026
Valley Kidney Specialists
Healthcare · Records not stated
Data breach exposed personal and health information from medical records
1 Jun 2026
Critical1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen in major ransomware attack disrupting healthcare services
1 Jun 2026
Critical1 Jun 2026
Partnered Health (Australian clinics)
Healthcare · Records not stated
Medical records breached including Medicare numbers, treatment details, and pathology results exposed on dark web.
1 Jun 2026
High1 Jun 2026
Hugging Face
Technology · Records not stated
Internal datasets and credentials compromised in breach, users urged to rotate access tokens
1 Jun 2026
High1 Jun 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Police and government contact details including names and emails leaked on dark web
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen during major ransomware attack affecting healthcare services
1 Jun 2026
Critical1 Jun 2026
Department for Education (DfE)
Government · 607,000 records
Cyber attack exposed 607,000 records
1 Jun 2026
High1 Jun 2026
Coca-Cola (Dairy Operations)
Retail · Records not stated
Ransomware attack shut down dairy operations; data breach disclosed to SEC
1 Jun 2026
High1 Jun 2026
Synnovis
Healthcare · 900,000 records
Thousands of NHS patient records stolen during major ransomware attack affecting Mid South Essex Foundation Trust
1 Jun 2026
Critical1 Jun 2026
Amgen
Healthcare · Records not stated
Patient health data and IP stolen in cybersecurity breach; cloud environment compromised
1 Jun 2026
Critical1 Jun 2026
Origin Energy
Sector not stated · 2,000,000 records
Customer data leak in cyberattack; 2 million records stolen
1 Jun 2026
Critical1 Jun 2026
Coca-Cola (Fairlife)
Retail · Records not stated
Ransomware attack shut down dairy operations; disclosure filed with SEC
1 Jun 2026
High1 Jun 2026
Huntsville Hospital Health System
Healthcare · Records not stated
Personal health information of patients compromised through third-party data breach
1 Jun 2026
High1 Jun 2026
Data breach
Legal · 13,000 records
Data breach exposed hospital records of nearly 13,000 patients in New Jersey through cyberattack on law firm
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen during major ransomware attack disrupting healthcare services
1 Jun 2026
High1 Jun 2026
Essex NHS Trust
Healthcare · 900,000 records
Thousands of patient records stolen in cyber attack; disclosure more than six months after notification
1 Jun 2026
Critical1 Jun 2026
Department for Education
Government · 607,000 records
Cyber attack exposed approximately 607,000 records
1 Jun 2026
Critical1 Jun 2026
Fortinet FortiGate
Technology · Records not stated
FortiBleed exposed verified admin credentials for 73,000+ firewall and VPN devices
1 Jun 2026
High1 Jun 2026
Organisation not named
Healthcare · 900,000 records
The disclosure as indexed does not name the organisation.
Thousands of NHS patient records stolen in major ransomware cyberattack
1 Jun 2026
Critical1 Jun 2026
Unknown (Elasticsearch database)
Sector not stated · Records not stated
Publicly exposed Elasticsearch database leaked 24 billion stolen credentials; largest infostealer log compilation
1 Jun 2026
Critical1 Jun 2026
Medical billing company (unnamed)
Healthcare · 1,300,000 records
Ransomware attack exposed 1.3M people's protected health data leaked to dark web in 2025
1 Jun 2026
Were you affected?