Weekly briefing No. 42 published 30 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,366
Disclosures in the tracker, all years
2,082
Of those, indexed in 2026
146
Added in October
23
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 30 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

78 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States29 Oct 2026The Research Foundation for Mental Health, Inc.The source does not say how they got in.Vermont Attorney General
  2. United States29 Oct 2026Del Monte Foods Corporation II Inc.The source does not say how they got in.California Attorney General
  3. United States29 Oct 2026Bangkok Bank PCL - New York BranchThe source does not say how they got in.California Attorney General
  4. United States29 Oct 2026IRhythm TechnologiesThe source does not say how they got in.SecurityWeek
  5. United States28 Oct 2026Photon HealthHow they got in: a known flaw in software the victim ran.California Attorney General
  6. United States28 Oct 2026CodeSecure Inc.The source does not say how they got in.Vermont Attorney General
  7. United States28 Oct 202611252227 Canada Inc.The source does not say how they got in.Vermont Attorney General
  8. United States28 Oct 2026Troutman Pepper Locke LLPThe source does not say how they got in.California Attorney General
  9. United States28 Oct 2026Legacy CooperativeThe source does not say how they got in.Vermont Attorney General
  10. United States28 Oct 2026Metro Tulsa Foot & Ankle SpecialistThe source does not say how they got in.Vermont Attorney General
  11. United States28 Oct 2026Quantum Health, Inc.The source does not say how they got in.Vermont Attorney General
  12. United States27 Oct 2026Sarasota US Topco, Inc. d/b/a Sarku Japan (“Sarku”)The source does not say how they got in.California Attorney General
High1 Feb 2025
Southern Water
Sector not stated · Records not stated
Ransomware attack resulting in £4.5 million cost and data exposure
1 Feb 2025
Critical1 Feb 2025
DISA Global Solutions
Sector not stated · 3,300,000 records
Data breach impacted more than 3.3 million people
1 Feb 2025
High1 Feb 2025
Baltimore City Public Schools
Education · Records not stated
Ransomware attack stole data from thousands of students, teachers, administrators
1 Feb 2025
High1 Feb 2025
Mizuno
Retail · Records not stated
Data breach confirmed after 2024 ransomware attack affecting customers
1 Feb 2025
Critical1 Feb 2025
Conduent
Sector not stated · 25,000,000 records
At least 25 million people had personal data stolen in cyberattack; printing, payment, and document services company
1 Feb 2025
High1 Feb 2025
Baltimore City Public Schools
Education · Records not stated
Thousands of students, teachers and administrators had information stolen during February ransomware attack
1 Feb 2025
High1 Feb 2025
FirstClass
Sector not stated · Records not stated
Customer records of Australian travel agency allegedly breached
1 Feb 2025
High1 Feb 2025
Mizuno
Retail · Records not stated
Ransomware attack exposed customer data after 2024 breach claims
1 Feb 2025
High28 Jan 2025
HeatGames
Technology · 647,896 records
647,896 records exposed, Email addresses, Geographic locations, IP addresses, Passwords
28 Jan 2025
Medium28 Jan 2025
Doxbin Scrape
Government · 435,784 records
435,784 records exposed, Email addresses
28 Jan 2025
High27 Jan 2025
Frederick Health
Healthcare · 934,000 records
934K patient records exposed in ransomware attack
27 Jan 2025
Medium22 Jan 2025
Welhof
Retail · 107,292 records
107,292 records exposed, Email addresses, Names, Physical addresses, Purchases
22 Jan 2025
Medium22 Jan 2025
Frame & Optic
Government · 15,678 records
15,678 records exposed, Email addresses, Geographic locations, Names, Phone numbers
22 Jan 2025
Medium18 Jan 2025
Otelier
Finance · 436,855 records
436,855 records exposed, Email addresses, Names, Partial credit card data, Phone numbers and 3 more
18 Jan 2025
Medium17 Jan 2025
MSI
Government · 249,990 records
249,990 records exposed, Email addresses, Names, Phone numbers, Physical addresses and 1 more
17 Jan 2025
High16 Jan 2025
Le Coq Sportif Columbia
Technology · 79,712 records
79,712 records exposed, Dates of birth, Device information, Email addresses, Genders and 5 more
16 Jan 2025
High13 Jan 2025
Scholastic
Technology · 4,247,768 records
4,247,768 records exposed, Email addresses, Names, Phone numbers, Physical addresses
13 Jan 2025
Medium13 Jan 2025
Eindhoven University of Technology
Education · Records not stated
Cyberattack forced campus-wide network shutdown, classes cancelled for a week
13 Jan 2025
High12 Jan 2025
SuperDraft
Technology · 300,187 records
300,187 records exposed, Dates of birth, Email addresses, Geographic locations, Latitude and longitude pairs and 3 more
12 Jan 2025
High9 Jan 2025
Telefonica Spain
Technology · Records not stated
120,000 employee and customer records stolen by ransomware group
9 Jan 2025
Critical6 Jan 2025
Gravy Analytics
Technology · Records not stated
17B location data points exposed including precise GPS tracking
6 Jan 2025
High3 Jan 2025
GLAMIRA
Retail · 874,594 records
874,594 records exposed, Email addresses, Names, Phone numbers, Purchases
3 Jan 2025
Critical2 Jan 2025
Community Health Center Inc
Healthcare · 1,000,000 records
1M patient records exposed in data breach
2 Jan 2025
Critical1 Jan 2025
Conduent Business Services
Sector not stated · 62,200,000 records
62.2 million individuals' personal data exposed; printing, mailing, and document services vendor breach
1 Jan 2025
Were you affected?