How attackers turn a real estate brokerage's public footprint into a redirected closing wire, and why the industry's 'verify verbally' response does not touch the actual chain.
Read the briefing
Filter by sector
32 briefings in library
All Cross-sector Dental practices Medical / clinics Veterinary Legal / law firms Accounting / bookkeeping Financial / wealth advisory Insurance brokers M&A / business brokers Real estate / property management Construction / trades Manufacturing / industrial Retail / e-commerce Hospitality / restaurants Automotive / dealerships Transportation / logistics Technology / SaaS Education / private schools Non-profit / charity Fitness / wellness Other professional services
Real estate / property management
The Weeks Before the Wire Redirect
Accounting / bookkeeping
The Tax File Nobody Told You Was Public
Attackers spend weeks inside a small accounting firm's email before a single message asks for anything. Here is what they extract during that window (tax returns, financial statements, payroll data), how they extract it, and why the industry's 'MFA and backups' response misses the entire attack.
Read the briefing
healthcare
Underground observation report: July 2026
Categories of stolen data actively offered for sale on monitored channels in July 2026, sourced from LeakTrace passive observation of Telegram, Discord, and underground forums.
Read the briefing
Cross-sector
The endorsement due-diligence workup: what brand teams find on an athlete before signing
Endorsement partners increasingly commission reputation-background workups before signing an athlete. What surfaces in that workup, and what an agency can do about it in advance.
Read the briefing
Accounting / bookkeeping
The Tax File Nobody Told You Was Public
Attackers spend weeks inside a small accounting firm's email before a single message asks for anything. Here is what they extract during that window (tax returns, financial statements, payroll data), how they extract it, and why the industry's 'MFA and backups' response misses the entire attack.
Read the briefing
Real estate / property management
The Wire That Never Arrived
Attackers spend weeks inside a small real-estate brokerage's email before the closing-day wire lands in the wrong account. Here is what they extract during that window, how they redirect the funds, and why 'MFA and backups' misses the entire attack.
Read the briefing
Legal / law firms
The Case File Nobody Told You Was Public
Attackers spend weeks inside a small law firm's email before a single message asks for anything. Here is what they extract during that window, how they extract it, and why the industry's 'MFA and backups' response misses the entire attack.
Read the briefing
Insurance brokers
The Cyber Application Question Your Client Cannot Actually Answer
Cyber insurance applications ask questions small businesses check 'yes' on because they think they should. When the claim arrives and the answers get audited, the carrier denies. The broker who wrote the policy is the next defendant.
Read the briefing
Legal / law firms
The Case File Nobody Told You Was Public
Attackers spend weeks inside a small law firm's email before a single message asks for anything. Here is what they extract during that window, how they extract it, and why the industry's 'MFA and backups' response misses the entire attack.
Read the briefing
Cross-sector
The coordinated attack-campaign pattern against public individuals
What LeakTrace consistently observes when high-profile individuals face coordinated defamation, doxxing, deepfake, and wire-fraud campaigns. The pattern is remarkably repeatable and rarely a lone actor.
Read the briefing
Cross-sector
The American small-business cyber gap nobody names
What LeakTrace consistently observes across American small and mid-sized businesses, from dental practices and law firms to construction companies, retailers, and manufacturers. The pattern is remarkably universal.
Read the briefing
Dental practices
The PHIPA exposure pattern in Ontario dental practices
What LeakTrace consistently observes when scanning Ontario dental practices. The personal health information exposure surface is materially different from other Canadian small-business sectors.
Read the briefing
Education / private schools
The education cyber exposure where student data and FERPA / provincial statutes converge
What LeakTrace consistently observes across small and mid-sized private schools, tutoring operations, and educational institutions. Student data (much of it involving minors) and parallel Canadian and US regulatory obligations create a distinctive threat category.
Read the briefing
Financial / wealth advisory
The financial advisor cyber exposure the SEC Safeguards Rule already priced in
What LeakTrace consistently observes across small and mid-sized wealth advisory practices, RIA firms, and independent broker-dealer branches. Client asset flows plus regulatory Safeguards Rule enforcement put financial advisors in a distinctive threat category.
Read the briefing
Veterinary
The veterinary practice cyber exposure that consolidation buyers already price in
What LeakTrace consistently observes across small and mid-sized veterinary hospitals and specialty practices. Rapid corporate consolidation means every practice is a potential acquisition target, and cyber diligence has become table stakes for those transactions.
Read the briefing
Cross-sector
The Canadian small-business cyber gap nobody names
What LeakTrace consistently observes across Canadian small and mid-sized businesses, from dental clinics and law firms to construction companies, retailers, and manufacturers. The pattern is remarkably universal.
Read the briefing
Transportation / logistics
The logistics and transportation cyber exposure that freight fraud already exploits
What LeakTrace consistently observes across small and mid-sized logistics operators, freight brokers, and transportation firms. Load board fraud, freight bill redirection, and TMS platform exposure create a distinctive threat surface.
Read the briefing
Medical / clinics
The medical clinic cyber exposure pattern that changes the cost equation
What LeakTrace consistently observes across small and mid-sized medical clinics and specialty practices. Health custodian obligations under PHIPA and HIPAA put the cost profile of a clinic breach in a materially different category than any other small-business sector.
Read the briefing
Accounting / bookkeeping
The accounting firm cyber exposure that IRS Circular 230 and CPA Canada already anticipated
What LeakTrace consistently observes across small and mid-sized accounting firms and bookkeeping practices. Client tax data plus wire authorization workflows put accounting firms at the intersection of the highest-value data and the highest-loss fraud category.
Read the briefing
Other professional services
The professional services cyber exposure that consultants, architects, and agencies share
What LeakTrace consistently observes across consulting firms, architects, engineers, marketing agencies, HR / staffing firms, and MSPs. A common exposure pattern that acquirers and enterprise buyers now scrutinize.
Read the briefing
Non-profit / charity
The non-profit cyber exposure where donor data and wire fraud both matter
What LeakTrace consistently observes across small and mid-sized non-profits and charitable organizations. Donor data, grant funding flows, and charity impersonation scams create a distinctive threat surface that limited internal capacity struggles to address.
Read the briefing
Insurance brokers
What commercial insurance underwriters now require from Canadian small-business accounts
What LeakTrace consistently observes across Canadian cyber liability, E&O, and business owner policy renewals. The underwriting posture toward small-business accounts has materially shifted in the last 24 months.
Read the briefing
Fitness / wellness
The fitness and wellness cyber exposure that recurring billing and member health data both flag
What LeakTrace consistently observes across small and mid-sized fitness studios, gyms, and wellness practices. Member payment data on recurring billing plus member health information create a threat surface that most operators have never mapped.
Read the briefing
Legal / law firms
The law firm cyber exposure pattern nobody wants to name
What LeakTrace consistently observes across small and mid-sized law firms. Solicitor-client privilege obligations plus trust account flows put law firms in a distinctive threat category with materially different downside than other professional services.
Read the briefing
Real estate / property management
The real estate cyber exposure that closing wire fraud already made everyone talk about
What LeakTrace consistently observes across small and mid-sized real estate brokerages and property management firms. Closing wire fraud is the single largest BEC loss category the FBI tracks, and the real estate sector sits at the center of it.
Read the briefing
Construction / trades
The construction firm cyber exposure that subcontractor payment redirect fraud makes urgent
What LeakTrace consistently observes across small and mid-sized construction firms and specialty trades. Subcontractor payment redirect fraud is one of the fastest-growing BEC sub-categories the FBI tracks, and the construction sector sits at its center.
Read the briefing
Manufacturing / industrial
The manufacturing cyber exposure where IP theft and ICS both matter
What LeakTrace consistently observes across small and mid-sized manufacturers. IP theft, industrial control system exposure, and cascading supply-chain compromise put manufacturing in a threat category with materially different downside than services small businesses.
Read the briefing
M&A / business brokers
The pre-sale cyber DD gap in Canadian professional services deals
What LeakTrace consistently observes when running buyer-side style cyber diligence against Canadian professional services firms preparing to sell. The pattern is producing re-pricing losses that sellers rarely recognize as cyber-driven.
Read the briefing
Retail / e-commerce
The retail and e-commerce cyber exposure that PCI-DSS makes non-negotiable
What LeakTrace consistently observes across small and mid-sized retail and e-commerce operators. Payment card exposure, e-commerce platform vulnerabilities, and card-brand mandatory scan requirements put retail in a compliance-driven cyber category.
Read the briefing
Hospitality / restaurants
The hospitality cyber exposure that PMS platforms and franchise brand standards both flag
What LeakTrace consistently observes across small and mid-sized hotels, restaurants, and hospitality operators. Property management system exposure, payment card breach history, and franchise brand cyber standards put hospitality in a distinctive threat category.
Read the briefing
Automotive / dealerships
The automotive dealership cyber exposure the CDK incident made unignorable
What LeakTrace consistently observes across small and mid-sized automotive dealerships. Dealer management system dependency, F&I financing paperwork holding SSN and income data, and the recent industry-wide ransomware incident put dealerships in an urgent cyber category.
Read the briefing
Technology / SaaS
The tech and SaaS cyber exposure where SOC 2 buyers already ask the question
What LeakTrace consistently observes across small and mid-sized technology firms and B2B SaaS operators. Enterprise buyer attestation, source code exposure, and cascading customer breach risk put tech firms in a heavily scrutinized cyber category.
Read the briefing
Standing distribution list
Receive intelligence briefings as they publish
One email when a briefing drops. Cross-sector patterns, sector-specific deep-dives, and structural exposure observations for the advisors, brokers, CFOs, and outside counsel who serve mid-market firms worldwide. No noise between.
Unsubscribe any time. Never shared. Never sold.
Methodology. LeakTrace research reflects aggregate observations across Canadian small-business scans. In accordance with standard threat intelligence practice, we do not disclose specific customer identities, absolute scan counts per report, or identifiable engagement details. Qualitative percentages and directional trends are based on operational visibility across the sectors we serve.