Weekly briefing No. 41 published 4 Oct 2026
Disclosure tracker › Disclosures in 2026
Intelligence · Disclosure tracker

Disclosures in 2026

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,280
Disclosures in the tracker, all years
1,993
Of those, indexed in 2026
39
Added in October
7
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 16 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

3,948 results · Disclosures in 2026. Clear filters

Critical9 Aug 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patients exposed in PEAR ransomware attack on healthcare billing company
9 Aug 2026
Critical9 Aug 2026
Instructure (Canvas)
Education · Records not stated
Supply chain breach generating over half of all breach notices in 2026
9 Aug 2026
High9 Aug 2026
Clinton Health Access Initiative
Healthcare · Records not stated
Ransomware attack by INC_RANSOM group
9 Aug 2026
Critical9 Aug 2026
Conduent Business Services
Healthcare · 62,200,000 records
62.2M records exposed in healthcare breach
9 Aug 2026
Medium9 Aug 2026
Alcon
Healthcare · 218,395 records
218,395 records exposed, Email addresses, Names, Phone numbers, Physical addresses
9 Aug 2026
High9 Aug 2026
Breach
Healthcare · Records not stated
Breach exposed personal and medical information including Social Security numbers
9 Aug 2026
Critical9 Aug 2026
Basic-Fit
Sector not stated · Records not stated
1M members bank and personal data breached
9 Aug 2026
Critical9 Aug 2026
100K+ officer and staff records exposed
Government · Records not stated
100K+ officer and staff records exposed
9 Aug 2026
Critical9 Aug 2026
Marquis Fintech
Finance · Records not stated
800K personal and financial records compromised
9 Aug 2026
Critical9 Aug 2026
US Homeland Security Network
Government · Records not stated
Sensitive gov agency data accessed via HSIN platform
9 Aug 2026
Critical9 Aug 2026
135K law enforcement contact records leaked
Government · Records not stated
135K law enforcement contact records leaked
9 Aug 2026
High9 Aug 2026
Switzerland Federal IT Office
Government · Records not stated
200 government accounts compromised via SharePoint
9 Aug 2026
Critical9 Aug 2026
Snowflake Cloud Platform
Technology · 165,000,000 records
165+ orgs breached, billions of records stolen
9 Aug 2026
Critical9 Aug 2026
100K+ officers and staff contact data exposed
Government · Records not stated
100K+ officers and staff contact data exposed
9 Aug 2026
Medium9 Aug 2026
Swiss Federal IT Office
Government · Records not stated
200 government accounts compromised via SharePoint
9 Aug 2026
Critical9 Aug 2026
One Medical Seniors
Healthcare · Records not stated
Clinical records exfiltrated in third-party breach
9 Aug 2026
Critical9 Aug 2026
100K+ officer and justice professional records leaked
Government · Records not stated
100K+ officer and justice professional records leaked
9 Aug 2026
Medium9 Aug 2026
Liechtenstein Government Register
Government · Records not stated
31K beneficial ownership records exposed
9 Aug 2026
Critical9 Aug 2026
Snowflake Platform
Technology · 165,000,000 records
165 orgs breached billions of records stolen
9 Aug 2026
Critical9 Aug 2026
100K+ officer and staff records leaked
Government · Records not stated
100K+ officer and staff records leaked
9 Aug 2026
High9 Aug 2026
Harrods
Retail · 430,000 records
430K customer records stolen by third party
9 Aug 2026
Critical9 Aug 2026
100K+ officers and staff credentials exposed
Government · Records not stated
100K+ officers and staff credentials exposed
9 Aug 2026
Medium8 Aug 2026
Organisation not named
Technology · Records not stated
The disclosure as indexed does not name the organisation.
A cluster of nearly 800 malicious packages has been published to the npm registry as part of a new campaign designed to deliver cross-platform malware targeting Windows, Mac, and Linux systems. "These packages appear…
8 Aug 2026
Critical8 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
An update on the ransomware attack affecting the City of Coweta: the city manager has been through a ransomware attack before with another city, and reports that after they paid, they were reinfected weeks later, so…
8 Aug 2026
Were you affected?