Weekly briefing No. 42 published 30 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,405
Disclosures in the tracker, all years
2,119
Of those, indexed in 2026
40
Added in November
41
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 6 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

77 incidents from 10 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States4 Nov 2026New Century Ophthamology P.C.The source does not say how they got in.Vermont Attorney General
  2. United States4 Nov 2026Alation Inc.The source does not say how they got in.Vermont Attorney General
  3. United States3 Nov 2026Liberation Programs, Inc.The source does not say how they got in.Vermont Attorney General
  4. United States3 Nov 2026Hippo Analytics Inc.The source does not say how they got in.California Attorney General
  5. United States3 Nov 2026Peninsula Corridor Joint Powers Board (Caltrain)The source does not say how they got in.California Attorney General
  6. United States3 Nov 2026Center Theatre Group of Los AngelesThe source does not say how they got in.California Attorney General
  7. United States3 Nov 2026Upland Unified School DistrictThe source does not say how they got in.California Attorney General
  8. United States3 Nov 2026Mavis Tire Supply LLCThe source does not say how they got in.Vermont Attorney General
  9. United States3 Nov 2026Mindbloom Provider Group, PAThe source does not say how they got in.Vermont Attorney General
  10. United States3 Nov 2026ISCO InternationalThe source does not say how they got in.Vermont Attorney General
  11. United States3 Nov 2026Ritz-Clark & Ben-Asher LLPThe source does not say how they got in.Vermont Attorney General
  12. United States2 Nov 2026Magnolia Management Company, LLCThe source does not say how they got in.Vermont Attorney General
High13 Jan 2023
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Employee PII stolen in ransomware attack on parent company
13 Jan 2023
Medium13 Jan 2023
Duolingo (AU/Global Impact)
Education · 2,600,000 records
2.6M user records scraped through API vulnerability, emails and learning data
13 Jan 2023
High13 Jan 2023
NortonLifeLock (2023)
Technology · 6,450 records
6,450 customer password manager vaults potentially accessed
13 Jan 2023
High13 Jan 2023
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Employee PII stolen in ransomware attack on parent company
13 Jan 2023
Critical12 Jan 2023
Philippine National Police
Government · Records not stated
1.2M employee records leaked including fingerprints and personal details
12 Jan 2023
High11 Jan 2023
Mailchimp
Technology · Records not stated
133 customer accounts compromised in social engineering
11 Jan 2023
Critical10 Jan 2023
LCBO
Retail · Records not stated
Credit card skimming malware on online store for 5 days
10 Jan 2023
High10 Jan 2023
BC Cancer Agency
Healthcare · Records not stated
Employee data and some patient info exposed
10 Jan 2023
High10 Jan 2023
LG Uplus (Korea)
Technology · 290,000 records
290,000 customer records stolen, national IDs, IMEI numbers, contact info
10 Jan 2023
Critical10 Jan 2023
Royal Mail LockBit Attack
Government · Records not stated
LockBit ransomware halted international mail for weeks, 44GB data published
10 Jan 2023
High10 Jan 2023
LCBO Web Skimmer Attack
Retail · Records not stated
Magecart web skimmer on LCBO checkout pages, customer payment cards compromised for 5 days
10 Jan 2023
High10 Jan 2023
Aflac
Finance · 1,300,000 records
100K policyholder records exposed in contractor breach
10 Jan 2023
Critical10 Jan 2023
Duolingo
Technology · 2,600,000 records
2.6M user records scraped via API
10 Jan 2023
Medium9 Jan 2023
Des Moines Public Schools
Education · Records not stated
6,700+ student and staff records exposed in ransomware
9 Jan 2023
High8 Jan 2023
Latvian Foreign Ministry
Government · Records not stated
State-sponsored hackers compromised Latvian diplomatic communications
8 Jan 2023
Medium8 Jan 2023
Northeast Surgical Group
Healthcare · 15,000 records
15K patient records exposed
8 Jan 2023
Medium7 Jan 2023
DoorDash
Finance · 367,476 records
367,476 records exposed, Email addresses, Geographic locations, Names, Partial credit card data
7 Jan 2023
Critical7 Jan 2023
SlideTeam
Retail · 1,464,271 records
1,464,271 records exposed, Email addresses, Names, Passwords
7 Jan 2023
Medium7 Jan 2023
Wichita State University
Education · Records not stated
36K student records exposed in data breach
7 Jan 2023
Medium6 Jan 2023
Rush University Medical Center
Healthcare · 45,000 records
45K patient records exposed in vendor breach
6 Jan 2023
Critical5 Jan 2023
Twitter (200M)
Technology · 211,524,284 records
211,524,284 records exposed, Email addresses, Names, Social media profiles, Usernames
5 Jan 2023
Medium5 Jan 2023
US Bank (vendor)
Finance · 11,000 records
11K customer records exposed via vendor breach
5 Jan 2023
Critical5 Jan 2023
NextGen Healthcare
Healthcare · 1,000,000 records
1M patient records exposed in BlackCat ransomware attack
5 Jan 2023
Medium4 Jan 2023
16K student records exposed
Education · Records not stated
16K student records exposed
4 Jan 2023
Were you affected?