Weekly briefing No. 42 published 30 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,377
Disclosures in the tracker, all years
2,093
Of those, indexed in 2026
12
Added in November
26
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 3 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

78 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States30 Oct 2026VT Department of LaborThe source does not say how they got in.Vermont Attorney General
  2. United States30 Oct 2026Incredible Technologies,Inc.The source does not say how they got in.Vermont Attorney General
  3. United States30 Oct 2026NCH CorporationThe source does not say how they got in.California Attorney General
  4. United States30 Oct 2026Aesto, LLCThe source does not say how they got in.California Attorney General
  5. United States30 Oct 2026The Nueva SchoolThe source does not say how they got in.California Attorney General
  6. United States30 Oct 2026El Camino HealthThe source does not say how they got in.California Attorney General
  7. United States30 Oct 2026Baanx US Corp.The source does not say how they got in.California Attorney General
  8. United States30 Oct 2026The Krum Public LibraryThe source does not say how they got in.Vermont Attorney General
  9. United States30 Oct 2026Marathon HealthThe source does not say how they got in.Vermont Attorney General
  10. United States29 Oct 2026HCA Healthcare, Inc.The source does not say how they got in.California Attorney General
  11. United States29 Oct 2026Blossom BH Opco Inc.The source does not say how they got in.California Attorney General
  12. United States29 Oct 2026BRANDco., LLCThe source does not say how they got in.Vermont Attorney General
Critical20 May 2024
Neiman Marcus (Snowflake)
Technology · 31,000,000 records
31M customer email addresses exposed
Our record
20 May 2024
Critical20 May 2024
190M customer records exposed
Technology · 190,000,000 records
190M customer records exposed
Our record
20 May 2024
Critical20 May 2024
Ticketmaster / Live Nation
Technology · 560,000,000 records
560M customer records stolen from Snowflake environment
Our record
20 May 2024
Critical20 May 2024
Snowflake (multi-tenant)
Technology · 500,000,000 records
165+ customer tenants breached via stolen credentials affecting 500M+ records
Our record
20 May 2024
Critical16 May 2024
MediSecure (Australia)
Healthcare · Records not stated
E-prescriptions provider breach, 12.9M Australian patient prescription records stolen
Our record
16 May 2024
High15 May 2024
ServiceNow
Technology · Records not stated
Misconfigured knowledge bases exposed sensitive data at thousands of orgs
Our record
15 May 2024
Medium14 May 2024
Citizens Bank (vendor)
Finance · 36,000 records
36K customer records exposed
Our record
14 May 2024
Critical14 May 2024
Santander Bank (Snowflake)
Technology · 30,000,000 records
30M customer records exposed via Snowflake-connected environment
Our record
14 May 2024
Medium11 May 2024
Atlantic Capital Bank
Finance · 19,000 records
19K customer records exposed
Our record
11 May 2024
Critical10 May 2024
The Post Millennial
Technology · 56,973,345 records
56,973,345 records exposed, Email addresses, Genders, IP addresses, Names and 4 more
Our record
10 May 2024
Critical10 May 2024
TD Bank (Canada/US)
Finance · 12,500,000 records
12.5M customer records compromised in data breach
Our record
10 May 2024
Medium9 May 2024
Tappware
Government · 94,734 records
94,734 records exposed, Dates of birth, Email addresses, Genders, Government issued IDs and 5 more
Our record
9 May 2024
High9 May 2024
Christie's Auction House
Sector not stated · 500,000 records
RansomHub stole 500K client records from art marketplace
Our record
9 May 2024
High9 May 2024
Christie's
Technology · 500,000 records
RansomHub stole 500K client records from auction house
Our record
9 May 2024
Critical9 May 2024
Dell Technologies
Technology · 49,000,000 records
49M customer order records exposed in API scraping
Our record
9 May 2024
High9 May 2024
Regional Care Hospital Partners
Healthcare · 340,000 records
340K patient records exposed
Our record
9 May 2024
Critical8 May 2024
Ascension Health Systems
Sector not stated · Records not stated
$1.8B impact from Black Basta ransomware on hospital chain
Our record
8 May 2024
Critical8 May 2024
Ascension (tech)
Technology · Records not stated
Black Basta ransomware disrupted clinical operations at 140 hospitals
Our record
8 May 2024
Critical8 May 2024
Ascension Health
Healthcare · 5,600,000 records
5.6M patient records compromised in Black Basta ransomware across 140 hospitals
Our recordOriginal disclosure
8 May 2024
Medium7 May 2024
Frame.io / Adobe
Technology · Records not stated
46K creative professional records exposed
Our record
7 May 2024
High5 May 2024
Palomar Health Medical Group
Healthcare · 520,000 records
520K patient records exposed
Our record
5 May 2024
High5 May 2024
City of Wichita KS
Government · Records not stated
LockBit ransomware attack disabled city services
Our record
5 May 2024
Medium3 May 2024
Five Below
Retail · 85,000 records
85K customer records exposed
Our record
3 May 2024
Medium2 May 2024
Southern Orthopaedic Associates
Healthcare · 21,000 records
21K patient records exposed
Our record
2 May 2024
Were you affected?