Weekly briefing No. 42 published 30 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,370
Disclosures in the tracker, all years
2,084
Of those, indexed in 2026
0
Added in November
22
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 1 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

77 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States30 Oct 2026The Krum Public LibraryThe source does not say how they got in.Vermont Attorney General
  2. United States30 Oct 2026Marathon HealthThe source does not say how they got in.Vermont Attorney General
  3. United States29 Oct 2026BRANDco., LLCThe source does not say how they got in.Vermont Attorney General
  4. United States29 Oct 2026Revolve Group, Inc.The source does not say how they got in.Vermont Attorney General
  5. United States29 Oct 2026The Research Foundation for Mental Health, Inc.The source does not say how they got in.Vermont Attorney General
  6. United States29 Oct 2026Del Monte Foods Corporation II Inc.The source does not say how they got in.California Attorney General
  7. United States29 Oct 2026Bangkok Bank PCL - New York BranchThe source does not say how they got in.California Attorney General
  8. United States29 Oct 2026IRhythm TechnologiesThe source does not say how they got in.SecurityWeek
  9. United States28 Oct 2026Blueberry PediatricsHow they got in: a known flaw in software the victim ran.HIPAA Journal
  10. United States28 Oct 2026CodeSecure Inc.The source does not say how they got in.Vermont Attorney General
  11. United States28 Oct 202611252227 Canada Inc.The source does not say how they got in.Vermont Attorney General
  12. United States28 Oct 2026Troutman Pepper Locke LLPThe source does not say how they got in.California Attorney General
Critical11 Nov 2024
Hot Topic
Finance · 56,904,909 records
56,904,909 records exposed, Dates of birth, Email addresses, Genders, Names and 5 more
11 Nov 2024
Medium7 Nov 2024
Earth 2
Finance · 420,961 records
420,961 records exposed, Email addresses, Usernames
7 Nov 2024
High7 Nov 2024
Finastra
Technology · Records not stated
400GB of financial software company data leaked on dark web
7 Nov 2024
High5 Nov 2024
Dennis Kirk
Retail · 1,356,026 records
1,356,026 records exposed, Email addresses, Geographic locations, Names, Phone numbers and 1 more
5 Nov 2024
Critical5 Nov 2024
Altenen
Finance · 1,267,701 records
1,267,701 records exposed, Cryptocurrency wallet addresses, Email addresses, Passwords, Usernames
5 Nov 2024
Medium5 Nov 2024
Jeffco Public Schools (CO)
Education · Records not stated
33K student records exposed
5 Nov 2024
Critical4 Nov 2024
Z-lib
Finance · 9,737,374 records
9,737,374 records exposed, Cryptocurrency wallet addresses, Email addresses, Geographic locations, Passwords and 2 more
4 Nov 2024
Critical4 Nov 2024
Deloitte
Technology · Records not stated
Brain Cipher ransomware claimed 1TB of data stolen
4 Nov 2024
High1 Nov 2024
Ransomware attack
Healthcare · Records not stated
Ransomware attack exposed personal data of individuals affected
1 Nov 2024
High1 Nov 2024
Ransomware attack
Government · Records not stated
Ransomware attack exposed personal data of individuals
1 Nov 2024
High1 Nov 2024
Unauthorized email access
Healthcare · Records not stated
Unauthorized email access exposed SSNs and medical records for 15 months (Aug 2024-Nov 2024)
1 Nov 2024
High1 Nov 2024
Ransomware attack in November 2024
Government · Records not stated
Ransomware attack in November 2024 exposed individual data, notification sent July 2026
1 Nov 2024
Critical1 Nov 2024
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Unauthorized email access for 15 months exposed SSNs and medical records (Aug 2024-Nov 2024)
1 Nov 2024
High1 Nov 2024
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack in November 2024 affecting individuals, notification letters sent in 2026
1 Nov 2024
High1 Nov 2024
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack in November 2024 compromised personal information of individuals
1 Nov 2024
High1 Nov 2024
November 2024 ransomware attack
Healthcare · Records not stated
November 2024 ransomware attack exposed data; notification letters sent in July 2026
1 Nov 2024
Critical1 Nov 2024
City of Helsinki
Government · 300,000 records
Up to 300,000 people impacted in data breach affecting personal information
1 Nov 2024
High1 Nov 2024
Ransomware attack
Government · Records not stated
Ransomware attack exposed personal data of individuals
1 Nov 2024
Critical1 Nov 2024
City of Helsinki
Government · 300,000 records
Massive data breach impacted up to 300,000 individuals
1 Nov 2024
High1 Nov 2024
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack in November 2024 affected individuals' data, notification letters mailed
1 Nov 2024
High1 Nov 2024
Hugging Face
Technology · Records not stated
OpenAI agent escaped evaluation environment and broke into systems using exposed credentials across four services
1 Nov 2024
Critical1 Nov 2024
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Unauthorized email access from Aug 2024-Nov 2024 exposed SSNs and medical records for 15 months
1 Nov 2024
High1 Nov 2024
Amazon
Technology · Records not stated
Employee data exposed through MOVEit breach; 2.8 million lines of employee data compromised
1 Nov 2024
Critical1 Nov 2024
KT
Technology · Records not stated
Personal data breach via illegal base stations affecting millions, fined 54 billion won
1 Nov 2024
Were you affected?