Weekly briefing No. 42 published 30 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,582
Disclosures in the tracker, all years
2,082
Of those, indexed in 2026
146
Added in October
21
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 31 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

78 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. China20 Oct 2026John DeereHow they got in: automated AI tools that work through many organizations at once.SecurityWeek
  2. China20 Oct 2026Deere, SharkNinja and CumminsHow they got in: a known flaw in software the victim ran.The Hacker News
High1 Dec 2024
PowerSchool
Education · Records not stated
December 2024 cyberattack exposed student and staff data from thousands of schools
1 Dec 2024
Critical1 Dec 2024
Snowflake
Technology · 165,000,000 records
Exposed credentials from info-stealing malware and previous attacks led to series of attacks against Snowflake database customers
1 Dec 2024
Critical1 Dec 2024
PowerSchool
Education · Records not stated
Dec 2024 cyberattack exposed student and staff data from thousands of schools
1 Dec 2024
High1 Dec 2024
PowerSchool
Education · Records not stated
December 2024 breach exposed student and staff data from thousands of schools
1 Dec 2024
Critical1 Dec 2024
LiteLLM
Technology · Records not stated
Supply chain attack: LiteLLM compromised through Trivy hack, distributed information-stealing malware to 2,500+ organizations
1 Dec 2024
Critical1 Dec 2024
Fortinet FortiGate
Technology · Records not stated
73,932 FortiGate firewalls exposed with valid administrative and VPN credentials in FortiBleed campaign
1 Dec 2024
High1 Dec 2024
Framework
Technology · Records not stated
Data breach exposed all customers' names, email addresses, phone numbers, and physical addresses
1 Dec 2024
High1 Dec 2024
Mizuno
Retail · Records not stated
2024 ransomware attack and data breach affecting customers
1 Dec 2024
High1 Dec 2024
Estée Lauder
Retail · Records not stated
Data breach tied to Oracle EBS vulnerability; exposed HR and operational data from company systems
1 Dec 2024
High1 Dec 2024
Abbott Laboratories
Healthcare · Records not stated
Cyber incident affecting medical device company; investigating data breach affecting patient information
1 Dec 2024
High1 Dec 2024
Suno
Technology · Records not stated
Customer records and AI model training data exposed; notification delays reported
1 Dec 2024
Critical1 Dec 2024
Gaming Accounts (Multiple)
Technology · Records not stated
Over 11 million gaming account credentials exposed in 2024 data leaks
1 Dec 2024
Critical1 Dec 2024
Ernst & Young
Finance · Records not stated
Names, addresses, SSNs, and financial information stolen from third-party platform
1 Dec 2024
High1 Dec 2024
River Financial Corporation
Finance · Records not stated
Ransomware attack; hackers stole data and later confirmed deletion
1 Dec 2024
Critical1 Dec 2024
Canada Life
Finance · 5,500,000 records
Threat actor claims 5.5 million records for sale including customer, employee, and corporate data
1 Dec 2024
High1 Dec 2024
Ecopetrol
Sector not stated · 3,300 records
Cyberattack stole data tied to approximately 3,300 user accounts at Colombian state energy company
1 Dec 2024
Critical1 Dec 2024
Accenture
Technology · Records not stated
Threat actor stole vast trove of sensitive data from consulting giant in cyberattack
1 Dec 2024
Critical1 Dec 2024
Trizetto Provider Solutions
Healthcare · 3,400,000 records
Unauthorized access to IT environment exposed PHI of 3.4 million individuals
1 Dec 2024
High1 Dec 2024
FirstClass (Australian travel agency)
Retail · Records not stated
Customer records allegedly breached; threat actor claims on underground forums
1 Dec 2024
Critical1 Dec 2024
Qantas
Sector not stated · 5,670,000 records
5.67 million customer records exposed via vishing attack including personal and travel information
1 Dec 2024
Critical1 Dec 2024
UnitedHealthcare
Healthcare · Records not stated
2024 cyberattack exposing sensitive health and insurance data from millions of patients
1 Dec 2024
Critical1 Dec 2024
Tribeca Film Festival
Sector not stated · 666,000 records
Unprotected database exposed 666,000 records including celebrity contact data without password or encryption
1 Dec 2024
Critical1 Dec 2024
McLaren Health Care
Healthcare · 3,200,000 records
Two ransomware attacks in 2023 and 2024 affecting 3.2 million patients, settled class-action for $14M
1 Dec 2024
Critical1 Dec 2024
Meta
Technology · Records not stated
2018 data breach; EU privacy regulator fined Meta 251 million euros for violations
1 Dec 2024
Were you affected?