Weekly briefing No. 42 published 30 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,370
Disclosures in the tracker, all years
2,084
Of those, indexed in 2026
0
Added in November
22
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 1 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

77 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States30 Oct 2026The Krum Public LibraryThe source does not say how they got in.Vermont Attorney General
  2. United States30 Oct 2026Marathon HealthThe source does not say how they got in.Vermont Attorney General
  3. United States29 Oct 2026BRANDco., LLCThe source does not say how they got in.Vermont Attorney General
  4. United States29 Oct 2026Revolve Group, Inc.The source does not say how they got in.Vermont Attorney General
  5. United States29 Oct 2026The Research Foundation for Mental Health, Inc.The source does not say how they got in.Vermont Attorney General
  6. United States29 Oct 2026Del Monte Foods Corporation II Inc.The source does not say how they got in.California Attorney General
  7. United States29 Oct 2026Bangkok Bank PCL - New York BranchThe source does not say how they got in.California Attorney General
  8. United States29 Oct 2026IRhythm TechnologiesThe source does not say how they got in.SecurityWeek
  9. United States28 Oct 2026Blueberry PediatricsHow they got in: a known flaw in software the victim ran.HIPAA Journal
  10. United States28 Oct 2026CodeSecure Inc.The source does not say how they got in.Vermont Attorney General
  11. United States28 Oct 202611252227 Canada Inc.The source does not say how they got in.Vermont Attorney General
  12. United States28 Oct 2026Troutman Pepper Locke LLPThe source does not say how they got in.California Attorney General
High1 Dec 2024
River Financial Corporation
Finance · Records not stated
Ransomware attack; hackers stole data and later confirmed deletion
1 Dec 2024
Critical1 Dec 2024
Canada Life
Finance · 5,500,000 records
Threat actor claims 5.5 million records for sale including customer, employee, and corporate data
1 Dec 2024
High1 Dec 2024
Ecopetrol
Sector not stated · 3,300 records
Cyberattack stole data tied to approximately 3,300 user accounts at Colombian state energy company
1 Dec 2024
Critical1 Dec 2024
Accenture
Technology · Records not stated
Threat actor stole vast trove of sensitive data from consulting giant in cyberattack
1 Dec 2024
Critical1 Dec 2024
Trizetto Provider Solutions
Healthcare · 3,400,000 records
Unauthorized access to IT environment exposed PHI of 3.4 million individuals
1 Dec 2024
High1 Dec 2024
FirstClass (Australian travel agency)
Retail · Records not stated
Customer records allegedly breached; threat actor claims on underground forums
1 Dec 2024
Critical1 Dec 2024
Qantas
Sector not stated · 5,670,000 records
5.67 million customer records exposed via vishing attack including personal and travel information
1 Dec 2024
Critical1 Dec 2024
UnitedHealthcare
Healthcare · Records not stated
2024 cyberattack exposing sensitive health and insurance data from millions of patients
1 Dec 2024
Critical1 Dec 2024
Tribeca Film Festival
Sector not stated · 666,000 records
Unprotected database exposed 666,000 records including celebrity contact data without password or encryption
1 Dec 2024
Critical1 Dec 2024
McLaren Health Care
Healthcare · 3,200,000 records
Two ransomware attacks in 2023 and 2024 affecting 3.2 million patients, settled class-action for $14M
1 Dec 2024
Critical1 Dec 2024
Meta
Technology · Records not stated
2018 data breach; EU privacy regulator fined Meta 251 million euros for violations
1 Dec 2024
High1 Dec 2024
South Florida Injury Centers
Healthcare · 1,525 records
Data breach exposed 1,525 records including SSNs and medical records (PHI/PII)
1 Dec 2024
Critical1 Dec 2024
Revolut
Finance · 75,000,000 records
75 million customer records including credit card data allegedly exposed for sale
1 Dec 2024
High1 Dec 2024
PowerSchool
Education · Records not stated
Cyberattack in Dec 2024 exposed student and staff data from thousands of schools
1 Dec 2024
High29 Nov 2024
Krispy Kreme
Technology · Records not stated
Play ransomware attack disrupted online ordering systems
29 Nov 2024
High28 Nov 2024
Alder Hey Children's Hospital
Healthcare · Records not stated
INC Ransom gang stole patient records from Liverpool children's hospital
28 Nov 2024
High25 Nov 2024
Wirral University Teaching Hospital
Healthcare · Records not stated
Cyberattack forced hospital to declare major incident, systems offline for days
25 Nov 2024
Medium22 Nov 2024
The Real World
Education · 324,382 records
324,382 records exposed, Chat logs, Email addresses, Usernames
22 Nov 2024
High21 Nov 2024
Morrisons (Blue Yonder)
Sector not stated · Records not stated
UK grocery operations disrupted in supply chain attack
21 Nov 2024
High21 Nov 2024
Starbucks (Blue Yonder)
Sector not stated · Records not stated
Employee scheduling disrupted in supply chain ransomware
21 Nov 2024
Critical21 Nov 2024
Blue Yonder
Technology · Records not stated
Supply chain SaaS provider hit by ransomware affecting Starbucks, grocery chains
21 Nov 2024
High20 Nov 2024
FlipaClip
Technology · 892,854 records
892,854 records exposed, Dates of birth, Email addresses, Geographic locations, Names
20 Nov 2024
Medium19 Nov 2024
Finsure
Finance · 296,124 records
296,124 records exposed, Email addresses, Names, Phone numbers, Physical addresses
19 Nov 2024
Critical13 Nov 2024
DemandScience by Pure Incubation
Technology · 121,796,165 records
121,796,165 records exposed, Email addresses, Employers, Job titles, Names and 3 more
13 Nov 2024
Were you affected?