Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,358
Disclosures in the tracker, all years
2,074
Of those, indexed in 2026
135
Added in October
18
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 28 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

75 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States27 Oct 2026NorthShore Health CentersThe source does not say how they got in.HIPAA Journal
  2. United States27 Oct 2026University of New Mexico Health SystemThe source does not say how they got in.The Record
  3. United States26 Oct 2026Chisholm, Persson & Ball, P.C.The source does not say how they got in.Vermont Attorney General
  4. United States26 Oct 2026Alpha Omega Alpha Honor Medical SocietyThe source does not say how they got in.Vermont Attorney General
  5. United States26 Oct 2026USForex Inc.The source does not say how they got in.California Attorney General
  6. United States26 Oct 2026Monmouth UniversityThe source does not say how they got in.Vermont Attorney General
  7. United States26 Oct 2026Denver Health Medical PlanThe source does not say how they got in.HIPAA Journal
  8. United States24 Oct 2026Brooklyn Counseling ServicesThe source does not say how they got in.Vermont Attorney General
  9. United States24 Oct 2026Northeastern Mental Health CenterThe source does not say how they got in.Vermont Attorney General
  10. United States23 Oct 2026Navigate 360, LLCThe source does not say how they got in.California Attorney General
  11. United States23 Oct 2026Apollo Management Holdings, L.P.The source does not say how they got in.California Attorney General
  12. United States23 Oct 2026RL Schreiber, Inc.The source does not say how they got in.Vermont Attorney General
High1 Nov 2025
Unauthorized access to information systems
Education · Records not stated
Unauthorized access to information systems exposed donor and personal records
1 Nov 2025
Critical1 Nov 2025
Multiple Providers
Technology · Records not stated
1.3 billion unique passwords exposed in extensive data leak
1 Nov 2025
Critical1 Nov 2025
Multiple (Extensive Password Leak)
Technology · Records not stated
1.3 billion unique passwords exposed in extensive data leak
1 Nov 2025
Critical1 Nov 2025
Multiple (Credential Leak)
Technology · Records not stated
1.3 billion unique passwords exposed in extensive data breach
1 Nov 2025
Critical1 Nov 2025
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
1.3 billion unique passwords exposed in extensive data leak
1 Nov 2025
Critical1 Nov 2025
Large Password Database
Technology · Records not stated
1.3 billion unique passwords exposed in extensive data leak
1 Nov 2025
Critical1 Nov 2025
Real Estate Tech Vendor
Finance · Records not stated
Cyberattack exposing JPMorgan, Citi, Morgan Stanley client data
1 Nov 2025
High1 Nov 2025
Organisation not named
Education · Records not stated
The disclosure as indexed does not name the organisation.
Donor records and personal information accessed by unauthorized party
1 Nov 2025
Critical1 Nov 2025
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Real-estate lender technology vendor cyberattack compromised client sensitive data
1 Nov 2025
High1 Nov 2025
Harvard Development Office
Education · Records not stated
Unauthorized access to information systems exposed donor records and personal information
1 Nov 2025
High1 Nov 2025
Doctor Alliance
Healthcare · Records not stated
Hacked by threat actor who listed data for sale; second breach by same threat actor
1 Nov 2025
High1 Nov 2025
SitusAMC
Finance · Records not stated
Technology vendor breach compromising sensitive personal information of banking clients' customers
1 Nov 2025
High1 Nov 2025
Unauthorized access to information systems
Education · Records not stated
Unauthorized access to information systems exposed donor and alumni records
1 Nov 2025
High1 Nov 2025
Organisation not named
Education · Records not stated
The disclosure as indexed does not name the organisation.
Unauthorized access to information systems exposed donor records and personal information
1 Nov 2025
High1 Nov 2025
Harvard University Development Office
Education · Records not stated
Unauthorized access to Alumni Affairs and Development Office systems exposed donor records
1 Nov 2025
Critical1 Nov 2025
Multiple Sources (Extensive Leak)
Technology · Records not stated
1.3 billion unique passwords exposed in extensive data breach compilation
1 Nov 2025
High1 Nov 2025
Intel
Technology · 18,000 records
Insider threat resulted in theft of approximately 18,000 files
1 Nov 2025
High1 Nov 2025
Banking Industry Vendor
Finance · Records not stated
Cyberattack compromised sensitive data of multiple banking clients, vendor responding to attack
1 Nov 2025
Critical1 Nov 2025
Large Email/Password Database
Sector not stated · 2,000,000,000 records
1.3 billion unique passwords and 2 billion emails exposed in massive credential leak compilation
1 Nov 2025
High1 Nov 2025
Harvard University
Education · Records not stated
Unauthorized access to Alumni Affairs and Development Office systems exposed donor records
1 Nov 2025
High1 Nov 2025
Harvard University (Development Office)
Education · Records not stated
Unauthorized access to Alumni Affairs and Development Office information systems exposed donor records
1 Nov 2025
Critical1 Nov 2025
JSONFormatter & CodeBeautify
Technology · Records not stated
5GB of leaked credentials exposing passwords and API keys across critical sectors
1 Nov 2025
High1 Nov 2025
North Carolina Ports
Government · Records not stated
Cyberattack forced shift to manual operations; systems restoration ongoing
1 Nov 2025
High1 Nov 2025
Post Office Limited
Government · Records not stated
Data breach of Horizon IT scandal victims' personal information ruled 'entirely preventable'
1 Nov 2025
Were you affected?