Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,491
Disclosures in the tracker, all years
2,079
Of those, indexed in 2026
141
Added in October
18
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 30 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

76 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States28 Oct 2026Legacy CooperativeThe source does not say how they got in.Vermont Attorney General
  2. United States28 Oct 2026Metro Tulsa Foot & Ankle SpecialistThe source does not say how they got in.Vermont Attorney General
  3. United States28 Oct 2026Quantum Health, Inc.The source does not say how they got in.Vermont Attorney General
  4. United States27 Oct 2026Directed Trust CompanyThe source does not say how they got in.Vermont Attorney General
  5. United States27 Oct 2026NorthShore Health CentersThe source does not say how they got in.HIPAA Journal
  6. United States27 Oct 2026University of New Mexico Health SystemThe source does not say how they got in.The Record
  7. United States26 Oct 2026Chisholm, Persson & Ball, P.C.The source does not say how they got in.Vermont Attorney General
  8. United States26 Oct 2026Alpha Omega Alpha Honor Medical SocietyThe source does not say how they got in.Vermont Attorney General
  9. United States26 Oct 2026USForex Inc.The source does not say how they got in.California Attorney General
  10. United States26 Oct 2026Monmouth UniversityThe source does not say how they got in.Vermont Attorney General
  11. United States26 Oct 2026Denver Health Medical PlanThe source does not say how they got in.HIPAA Journal
  12. United States24 Oct 2026Brooklyn Counseling ServicesThe source does not say how they got in.Vermont Attorney General
High1 Aug 2025
Cerner (Third-party vendor)
Healthcare · Records not stated
Patient data breach affecting Huntsville Hospital and other health systems
1 Aug 2025
High1 Aug 2025
Klaviyo
Technology · Records not stated
Marketing tech platform inadvertently shared user sign-up information including passwords with advertisers
1 Aug 2025
High1 Aug 2025
Framework
Technology · Records not stated
Computer maker breach exposing names, email addresses, phone numbers, and physical addresses to all customers
1 Aug 2025
High1 Aug 2025
Huntsville Hospital
Healthcare · Records not stated
Patient health information compromised through third-party vendor Cerner breach in August 2025
1 Aug 2025
High1 Aug 2025
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Patient data compromised through third-party vendor, unauthorized access by third party
1 Aug 2025
High1 Aug 2025
Cerner (via Huntsville Hospital)
Healthcare · Records not stated
Patient health information compromised through third-party vendor breach affecting hospital systems
1 Aug 2025
Critical1 Aug 2025
Gaming Industry (Multiple)
Technology · Records not stated
11 million gaming account credentials exposed in data leaks during 2024
1 Aug 2025
Critical1 Aug 2025
Optus
Finance · Records not stated
2022 data breach, Australian privacy regulator sued carrier for privacy law violations
1 Aug 2025
Critical1 Aug 2025
Gaming platforms
Technology · Records not stated
11 million gaming account credentials exposed in 2024 data leaks
1 Aug 2025
High1 Aug 2025
Gaming Accounts (Multiple Platforms)
Technology · Records not stated
Over 11 million gaming account credentials exposed in 2024 data leaks
1 Aug 2025
High1 Aug 2025
Multiple Gaming Services
Technology · Records not stated
11 million gaming account credentials exposed in data leaks affecting multiple gaming platforms
1 Aug 2025
Critical1 Aug 2025
Gaming Accounts (Multiple)
Technology · Records not stated
Over 11 million gaming account credentials exposed with login information compromised
1 Aug 2025
High1 Aug 2025
North Carolina Ports Authority
Government · Records not stated
Cyberattack disrupted IT systems and operations at Port of Wilmington, forced shift to manual operations
1 Aug 2025
High1 Aug 2025
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Electronic health record system breach affecting Huntsville Hospital patients
1 Aug 2025
High1 Aug 2025
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised; anomalies detected in on-premises Microsoft servers
1 Aug 2025
High1 Aug 2025
Cerner (HHS vendor)
Healthcare · Records not stated
Unauthorized third party breached electronic health record system affecting hospital patients
1 Aug 2025
High1 Aug 2025
Cerner (Huntsville Hospital vendor)
Healthcare · Records not stated
EHR vendor breach affecting hospital patient records via unauthorized third party access
1 Aug 2025
High1 Aug 2025
Cerner (EHR Vendor)
Healthcare · Records not stated
Huntsville Hospital vendor breach affecting patient records via unauthorized third-party access
1 Aug 2025
High1 Aug 2025
Huntsville Hospital Health System
Healthcare · Records not stated
Third-party vendor data breach exposed patient information at hospital facilities
1 Aug 2025
High1 Aug 2025
Cerner
Healthcare · Records not stated
EHR vendor breach exposed patient data at Huntsville Hospital Health System and other healthcare systems.
1 Aug 2025
High1 Aug 2025
Cerner/Huntsville Hospital
Healthcare · Records not stated
EHR vendor breach notified healthcare systems of unauthorized third-party access
1 Aug 2025
High1 Aug 2025
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised via Microsoft SharePoint vulnerabilities on on-premises servers
1 Aug 2025
High1 Aug 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Data security incident, $40M settlement reached in class action
1 Aug 2025
High1 Aug 2025
Data security incident resulted in $40M settlement
Retail · Records not stated
Data security incident resulted in $40M settlement
1 Aug 2025
Were you affected?