Weekly briefing No. 42 published 30 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,367
Disclosures in the tracker, all years
2,083
Of those, indexed in 2026
0
Added in November
22
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 1 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

77 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States30 Oct 2026The Krum Public LibraryThe source does not say how they got in.Vermont Attorney General
  2. United States30 Oct 2026Marathon HealthThe source does not say how they got in.Vermont Attorney General
  3. United States29 Oct 2026BRANDco., LLCThe source does not say how they got in.Vermont Attorney General
  4. United States29 Oct 2026Revolve Group, Inc.The source does not say how they got in.Vermont Attorney General
  5. United States29 Oct 2026The Research Foundation for Mental Health, Inc.The source does not say how they got in.Vermont Attorney General
  6. United States29 Oct 2026Del Monte Foods Corporation II Inc.The source does not say how they got in.California Attorney General
  7. United States29 Oct 2026Bangkok Bank PCL - New York BranchThe source does not say how they got in.California Attorney General
  8. United States29 Oct 2026IRhythm TechnologiesThe source does not say how they got in.SecurityWeek
  9. United States28 Oct 2026Blueberry PediatricsHow they got in: a known flaw in software the victim ran.HIPAA Journal
  10. United States28 Oct 2026CodeSecure Inc.The source does not say how they got in.Vermont Attorney General
  11. United States28 Oct 202611252227 Canada Inc.The source does not say how they got in.Vermont Attorney General
  12. United States28 Oct 2026Troutman Pepper Locke LLPThe source does not say how they got in.California Attorney General
High1 Nov 2024
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack in November 2024 exposed personal data of individuals
1 Nov 2024
High1 Nov 2024
Ransomware attack in November 2024
Government · Records not stated
Ransomware attack in November 2024 exposed personal information of individuals receiving regional center services
1 Nov 2024
High1 Nov 2024
Ransomware attack affecting individuals; notification letters sent
Government · Records not stated
Ransomware attack affecting individuals; notification letters sent
1 Nov 2024
Critical1 Nov 2024
Qantas
Sector not stated · 5,670,000 records
5.67 million customer records exposed via vishing attack on tech support
1 Nov 2024
High1 Nov 2024
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack in November 2024 affecting individuals, notification letters sent
1 Nov 2024
High1 Nov 2024
Equinox
Sector not stated · Records not stated
Data security incident exposed client and employee data
1 Nov 2024
High1 Nov 2024
Ransomware attack
Government · Records not stated
Ransomware attack exposed personal data of individuals receiving regional center services
1 Nov 2024
High1 Nov 2024
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack in November 2024 exposed personal information of individuals; notification letters sent
1 Nov 2024
High1 Nov 2024
Ransomware attack in November 2024
Government · Records not stated
Ransomware attack in November 2024 exposed sensitive data, notification sent to affected individuals
1 Nov 2024
High1 Nov 2024
Ransomware attack in November 2024
Government · Records not stated
Ransomware attack in November 2024 exposed individuals' personal information
1 Nov 2024
High1 Nov 2024
Ransomware attack in November 2024 affected individuals
Government · Records not stated
Ransomware attack in November 2024 affected individuals
1 Nov 2024
High1 Nov 2024
Ransomware attack in November 2024 affected individuals' data
Government · Records not stated
Ransomware attack in November 2024 affected individuals' data
1 Nov 2024
High1 Nov 2024
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack in November 2024 compromised records, notification letters mailed
1 Nov 2024
Critical1 Nov 2024
McLaren Health Care
Healthcare · Records not stated
Two ransomware breaches in 2023 and 2024 affected 3.2 million victims, settled class-action lawsuit for $14M
1 Nov 2024
High1 Nov 2024
Ransomware attack in November 2024
Government · Records not stated
Ransomware attack in November 2024 exposed personal data of affected individuals
1 Nov 2024
Critical1 Nov 2024
Amazon
Technology · Records not stated
Employee data exposed through MOVEit vulnerability exploitation; 2.8M lines of employee data
1 Nov 2024
High1 Nov 2024
November 2024 ransomware attack
Government · Records not stated
November 2024 ransomware attack exposed individuals' data, notification letters sent to affected parties
1 Nov 2024
High1 Nov 2024
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack in November 2024 exposed sensitive data affecting multiple individuals
1 Nov 2024
High1 Nov 2024
Globe Life (extortion)
Technology · 850,000 records
Threat actor extorted insurance company after stealing 850K records
1 Nov 2024
Critical31 Oct 2024
Stalker Online
Retail · 1,385,472 records
1,385,472 records exposed, Email addresses, IP addresses, Passwords, Usernames
31 Oct 2024
Critical30 Oct 2024
VimeWorld
Retail · 3,118,964 records
3,118,964 records exposed, Email addresses, IP addresses, Passwords, Usernames
30 Oct 2024
Critical30 Oct 2024
TNAFlix
Technology · 1,374,344 records
1,374,344 records exposed, Email addresses, IP addresses, Passwords, Usernames
30 Oct 2024
High30 Oct 2024
Lottie Files
Technology · Records not stated
Supply chain attack injected crypto drainer via animation library
30 Oct 2024
Critical27 Oct 2024
StreamCraft
Retail · 1,772,620 records
1,772,620 records exposed, Email addresses, IP addresses, Passwords, Usernames
27 Oct 2024
Were you affected?