Weekly briefing No. 41 published 4 Oct 2026
Disclosure tracker › Disclosures in 2026
Intelligence · Disclosure tracker

Disclosures in 2026

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,282
Disclosures in the tracker, all years
1,995
Of those, indexed in 2026
41
Added in October
9
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 17 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

3,949 results · Disclosures in 2026. Clear filters

Critical6 Jul 2026
JadePuffer
Sector not stated · Records not stated
An "agentic threat actor" successfully exploited a Langflow flaw to steal data from a production database server and encrypt other systems.
6 Jul 2026
Critical6 Jul 2026
Carrie Tait
Legal · Records not stated
Carrie Tait reports: A retired lawyer is suing Alberta, its Chief Electoral Officer and two organizations that support secession for their respective roles in an alleged data breach affecting 2.9 million residents in…
6 Jul 2026
High4 Jul 2026
AdaptHealth
Healthcare · Records not stated
Connor Jones reports: AdaptHealth says attackers used social engineering to breach its systems and steal sensitive patient data, including passwords associated with insurance billing. The medical equipment company…
4 Jul 2026
Medium3 Jul 2026
A new report from the Citizen Lab has
Sector not stated · Records not stated
A new report from the Citizen Lab has revealed that former Member of the European Parliament Stelios Kouloglou had his mobile device repeatedly hacked with the notorious Pegasus spyware while serving on a committee…
3 Jul 2026
High3 Jul 2026
Moody Bible Institute
Finance · 2,303,416 records
2,303,416 records exposed, Dates of birth, Email addresses, Genders, Marital statuses and 3 more
3 Jul 2026
Critical2 Jul 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Security firm Sysdig says it has found what it believes is the first ransomware attack run from start to finish by an AI agent. Its Threat Research Team calls the operator JADEPUFFER and says a large…
2 Jul 2026
Critical1 Jul 2026
GitHub
Technology · Records not stated
Over 543,000 valid credentials exposed in public repositories remained active despite security measures
1 Jul 2026
High1 Jul 2026
Ernst & Young
Finance · Records not stated
Sensitive client information exposed via third-party IT support platform compromise
1 Jul 2026
High1 Jul 2026
Department of Homeland Security
Government · Records not stated
Network intrusion on Homeland Security Information Network confirmed after twice being ruled false positive
1 Jul 2026
Critical1 Jul 2026
Accenture
Technology · Records not stated
Approximately 35 GB of Azure DevOps data stolen including source code, credentials, and sensitive client information
1 Jul 2026
Critical1 Jul 2026
Network intrusion
Government · Records not stated
Network intrusion confirmed after being twice ruled false positive, supporting World Cup infrastructure
1 Jul 2026
High1 Jul 2026
Coca-Cola Fairlife
Retail · Records not stated
Ransomware attack on dairy products subsidiary Fairlife resulted in confirmed data breach
1 Jul 2026
High1 Jul 2026
Network intrusion
Government · Records not stated
Network intrusion confirmed on Homeland Security Information Network supporting World Cup operations
1 Jul 2026
High1 Jul 2026
Fairlife (Coca-Cola subsidiary)
Retail · Records not stated
Ransomware attack resulted in confirmed data breach; production suspended
1 Jul 2026
High1 Jul 2026
KT
Technology · Records not stated
Data breach via illegal base stations, fined 54 billion won
1 Jul 2026
High1 Jul 2026
Bank of Baroda
Finance · Records not stated
Major cyberattack; alleged data breach in India affecting bank records
1 Jul 2026
High1 Jul 2026
Lifespan Physicians Group
Healthcare · 290,000 records
Data breach exposed over 290,000 patient records
1 Jul 2026
High1 Jul 2026
Partnered Health
Healthcare · Records not stated
Patient records stolen in cyber-attack affecting 21 Australian clinics; personal and medical data breached
1 Jul 2026
High1 Jul 2026
All About Women's Care
Healthcare · 12,000 records
Data breach compromised information of 12,000 patients in Colorado
1 Jul 2026
Critical1 Jul 2026
Accenture
Technology · Records not stated
Threat actor stole vast trove of sensitive data including access keys and source code from consulting giant
1 Jul 2026
High1 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Network intrusion on Homeland Security Information Network confirmed after being ruled false positive twice
1 Jul 2026
Critical1 Jul 2026
Instructure Canvas (Supply Chain)
Education · Records not stated
Single supply chain breach generated 58% of all breach notices in 2026
1 Jul 2026
Critical1 Jul 2026
Accenture
Technology · Records not stated
Threat actor claims theft of vast trove of sensitive data including access keys and source code
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Network intrusion on Homeland Security Information Network confirmed after twice being ruled false positive
1 Jul 2026
Were you affected?