Weekly briefing No. 41 published 4 Oct 2026
Disclosure tracker › Finance disclosures
Intelligence · Disclosure tracker

Finance disclosures

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,278
Disclosures in the tracker, all years
1,991
Of those, indexed in 2026
37
Added in October
7
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 15 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

2,285 results · Finance disclosures. Clear filters

High7 Aug 2026
TD Bank
Finance · Records not stated
Data security incident affecting customer information, separate newer breach in 2026
7 Aug 2026
High7 Aug 2026
Fidelity Investments
Finance · Records not stated
Data breach resulting in $1.25M settlement with Massachusetts regulator
7 Aug 2026
Critical7 Aug 2026
Bankinter
Finance · 1,270,000 records
EVO Banco data breach via API vulnerability exposed financial and identity data of 1.27 million individuals
7 Aug 2026
Critical7 Aug 2026
Basic-Fit Gym Operator
Finance · Records not stated
1M members' bank and personal data breached
7 Aug 2026
High6 Aug 2026
Evolve Bank
Finance · Records not stated
Data breach affecting third-party fintech company customers including Wise
6 Aug 2026
Critical6 Aug 2026
EVO Banco/Bankinter
Finance · 1,270,000 records
1.27 million records exposed via 2024 API vulnerability; financial and identity data compromised
6 Aug 2026
High6 Aug 2026
Allstate
Finance · Records not stated
Data breach exposed employee-related records in insurance company incident
6 Aug 2026
High6 Aug 2026
Intesa Sanpaolo S.p.A.
Finance · Records not stated
Employee insider threat accessing customer data unlawfully over 2+ years; €31.8M lesson in breach transparency
6 Aug 2026
Critical6 Aug 2026
Canada Life
Finance · 5,500,000 records
Threat actor claims 5.5 million records exposed, customer and employee data for sale
6 Aug 2026
Critical6 Aug 2026
Bankinter EVO Banco
Finance · 1,270,000 records
API vulnerability exposed financial and identity data of 1.27 million records
6 Aug 2026
High6 Aug 2026
Intesa Sanpaolo
Finance · Records not stated
Employee insider threat unlawfully accessed customer data over 2+ years, resulting in €31.8m fine
6 Aug 2026
Critical6 Aug 2026
Canada Life
Finance · 5,500,000 records
5.5 million records alleged stolen and put up for sale on dark web
6 Aug 2026
Medium6 Aug 2026
TruStage Financial Group
Finance · Records not stated
10.6K financial records exposed in network intrusion
6 Aug 2026
High6 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
A recent wave of cyberattacks targeting hedge funds, private-equity firms, and other financial organizations has been linked to UNC6671, an extortion group reportedly associated with the BlackFile campaign extortion…
6 Aug 2026
Critical6 Aug 2026
Nayax Fintech
Finance · Records not stated
100TB stolen including payment transaction records
6 Aug 2026
Critical6 Aug 2026
Aflac Life Insurance Japan
Finance · 1,300,000 records
4.38M policyholders and bank accounts stolen
6 Aug 2026
High6 Aug 2026
Canadian Credit Services Firm
Finance · 28,000 records
28K records with passport photos and loan documents stolen
6 Aug 2026
Critical6 Aug 2026
Navia Benefits Administration
Finance · Records not stated
2.7M SSNs and benefits records exposed
6 Aug 2026
High6 Aug 2026
Ernst Young
Finance · Records not stated
Client tax documents accessed via third-party platform
6 Aug 2026
Critical6 Aug 2026
Nayax
Finance · Records not stated
100TB claimed stolen including payment records
6 Aug 2026
High5 Aug 2026
Canadian Credit Firm
Finance · 28,000 records
55GB PII and financial records of 28K customers
5 Aug 2026
Critical5 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
I was mapping the command-and-control infrastructure behind a state-linked intrusion set when the query came back and effectively ended the exercise I thought I was running. The malware resolved its C2 address by…
5 Aug 2026
Critical2 Aug 2026
Revolut
Finance · 75,000,000 records
75 million records allegedly for sale including credit card and personal data
2 Aug 2026
Critical2 Aug 2026
Revolut
Finance · 75,000,000 records
Credit card data and private information of 75 million customers allegedly for sale by attackers
2 Aug 2026
Were you affected?