Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,349
Disclosures in the tracker, all years
2,065
Of those, indexed in 2026
125
Added in October
17
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 27 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

75 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States26 Oct 2026Monmouth UniversityThe source does not say how they got in.Vermont Attorney General
  2. United States26 Oct 2026Denver Health Medical PlanThe source does not say how they got in.HIPAA Journal
  3. United States24 Oct 2026Brooklyn Counseling ServicesThe source does not say how they got in.Vermont Attorney General
  4. United States24 Oct 2026Northeastern Mental Health CenterThe source does not say how they got in.Vermont Attorney General
  5. United States23 Oct 2026Industrial and healthcare organizationsHow they got in: a known flaw in software the victim ran.The Hacker News
  6. United States23 Oct 2026RL Schreiber, Inc.The source does not say how they got in.Vermont Attorney General
  7. United States23 Oct 2026Ford Audio-Video Systems, LLCThe source does not say how they got in.Vermont Attorney General
  8. United States23 Oct 2026EyeMed Vision Care, LLCThe source does not say how they got in.Vermont Attorney General
  9. United States23 Oct 2026Alabama Fire CollegeThe source does not say how they got in.Vermont Attorney General
  10. United States23 Oct 2026UltraMobile ImagingThe source does not say how they got in.HIPAA Journal
  11. United States23 Oct 2026Washington GastroenterologyThe source does not say how they got in.HIPAA Journal
  12. United States23 Oct 2026Tarter Krinsky & DroginThe source does not say how they got in.HIPAA Journal
Critical1 Feb 2026
Credential Database (Unknown Source)
Technology · Records not stated
149 million stolen passwords publicly exposed, including 48 million Gmail accounts
1 Feb 2026
Critical1 Feb 2026
Organisation not named
Technology · 149,000,000 records
The disclosure as indexed does not name the organisation.
149 million passwords exposed including 48 million Gmail accounts
1 Feb 2026
Critical1 Feb 2026
Unknown (Compiled Credential Database)
Technology · 149,000,000 records
149 million passwords exposed including 48 million Gmail accounts
1 Feb 2026
Critical1 Feb 2026
Credential Database Compilation
Technology · 149,000,000 records
149 million passwords and 48 million Gmail accounts exposed
1 Feb 2026
Critical1 Feb 2026
Multiple organizations (Credential compilation)
Technology · Records not stated
149 million stolen passwords exposed publicly, including 48 million Gmail accounts
1 Feb 2026
Critical1 Feb 2026
Multiple (Credential compilation)
Technology · 149,000,000 records
149 million passwords exposed in massive credential leak including 48 million Gmail accounts
1 Feb 2026
Critical1 Feb 2026
McLaren Health Care
Healthcare · Records not stated
Two ransomware breaches in 2023-2024 affecting 3.2M victims
1 Feb 2026
Critical1 Feb 2026
Mass Credential Database
Sector not stated · Records not stated
149 million stolen passwords exposed publicly online including 48 million Gmail accounts
1 Feb 2026
High1 Feb 2026
Conduent (Anthem)
Healthcare · Records not stated
Data breach impacted some Anthem health insurance members; contained with no evidence of misuse
1 Feb 2026
Critical1 Feb 2026
Multiple Sources (Credential Aggregation)
Technology · Records not stated
149 million stolen passwords and 48 million Gmail credentials exposed in massive database leak
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack disrupted patient records access and clinic operations
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack disrupted patient records access and clinic operations for over a week
1 Feb 2026
High1 Feb 2026
Ransomware attack and data
Healthcare · Records not stated
Ransomware attack and data leak exposed Multiethnic Cohort Study data including driver's license numbers and voter registration
1 Feb 2026
Critical1 Feb 2026
Various (Credential Compilation)
Technology · Records not stated
149 million stolen passwords found publicly exposed online including 48 million Gmail accounts
1 Feb 2026
Critical1 Feb 2026
Multiple Organizations
Technology · 149,000,000 records
149 million passwords exposed in credential database leak including 48 million Gmail accounts
1 Feb 2026
Critical1 Feb 2026
TriZetto
Healthcare · Records not stated
Healthcare tech provider breach affecting over 3 million Americans from 2024 incident
1 Feb 2026
High1 Feb 2026
Conduent/Anthem
Healthcare · Records not stated
Data breach impacts some Anthem members; breach contained with no evidence of misuse
1 Feb 2026
High1 Feb 2026
New Jersey Law Firm
Legal · 13,000 records
Cyberattack exposed hospital records of nearly 13,000 patients through breached law firm representing hospitals
1 Feb 2026
High1 Feb 2026
Anthem/Conduent
Healthcare · Records not stated
Data breach impacted some Anthem members; Conduent reported breach contained with no evidence of misuse
1 Feb 2026
Critical1 Feb 2026
Exposed database (unnamed)
Sector not stated · 3,000,000,000 records
Misconfigured cloud database exposed 3 billion records including SSNs and plaintext passwords
1 Feb 2026
Critical1 Feb 2026
Multiple (Credential Database)
Technology · 149,000,000 records
149 million passwords exposed including 48 million Gmail accounts in publicly exposed database
1 Feb 2026
High1 Feb 2026
Anthem
Healthcare · Records not stated
Data breach via Conduent affecting some Anthem insurance members
1 Feb 2026
Critical1 Feb 2026
Unknown Organization
Sector not stated · 3,000,000,000 records
Misconfigured cloud database exposed 3 billion records including SSNs and plaintext passwords
1 Feb 2026
Critical1 Feb 2026
Conduent Business Services
Technology · 25,000,000 records
Ransomware attack exposed data on more than 25 million individuals from government contractor
1 Feb 2026
Were you affected?