Weekly briefing No. 42 published 30 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,383
Disclosures in the tracker, all years
2,097
Of those, indexed in 2026
14
Added in November
25
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 4 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

77 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States3 Nov 2026Mavis Tire Supply LLCThe source does not say how they got in.Vermont Attorney General
  2. United States3 Nov 2026Mindbloom Provider Group, PAThe source does not say how they got in.Vermont Attorney General
  3. United States3 Nov 2026ISCO InternationalThe source does not say how they got in.Vermont Attorney General
  4. United States3 Nov 2026Ritz-Clark & Ben-Asher LLPThe source does not say how they got in.Vermont Attorney General
  5. United States2 Nov 2026Magnolia Management Company, LLCThe source does not say how they got in.Vermont Attorney General
  6. United States2 Nov 2026Apex Clean Energy Holdings, LLCThe source does not say how they got in.Vermont Attorney General
  7. United States2 Nov 2026ABC Supply Co., Inc.The source does not say how they got in.Vermont Attorney General
  8. United States2 Nov 2026University of Mississippi Medical Center (“UMMC”)The source does not say how they got in.California Attorney General
  9. United States30 Oct 2026VT Department of LaborThe source does not say how they got in.Vermont Attorney General
  10. United States30 Oct 2026Incredible Technologies,Inc.The source does not say how they got in.Vermont Attorney General
  11. United States30 Oct 2026NCH CorporationThe source does not say how they got in.California Attorney General
  12. United States30 Oct 2026Aesto, LLCThe source does not say how they got in.California Attorney General
Medium15 Oct 2022
28K patient records exposed in tracking pixel incident
Sector not stated · 28,000 records
28K patient records exposed in tracking pixel incident
Our record
15 Oct 2022
Medium15 Oct 2022
28K patient records exposed in tracking pixel incident
Sector not stated · 28,000 records
28K patient records exposed in tracking pixel incident
Our record
15 Oct 2022
Medium15 Oct 2022
28K patient records exposed in tracking pixel incident
Sector not stated · 28,000 records
28K patient records exposed in tracking pixel incident
Our record
15 Oct 2022
Medium15 Oct 2022
28K patient records exposed in tracking pixel incident
Sector not stated · 28,000 records
28K patient records exposed in tracking pixel incident
Our record
15 Oct 2022
Medium15 Oct 2022
28K patient records exposed in tracking pixel incident
Sector not stated · 28,000 records
28K patient records exposed in tracking pixel incident
Our record
15 Oct 2022
Medium15 Oct 2022
28K patient records exposed in tracking pixel incident
Sector not stated · 28,000 records
28K patient records exposed in tracking pixel incident
Our record
15 Oct 2022
High15 Oct 2022
Region of Durham
Government · Records not stated
Employee and resident data exposed in phishing attack
Our record
15 Oct 2022
Critical15 Oct 2022
Kakao Corp (Korea)
Technology · 48,000,000 records
Data center fire disrupted KakaoTalk, KakaoPay, KakaoMap for 48M users
Our record
15 Oct 2022
Medium15 Oct 2022
Humana
Healthcare · Records not stated
65K member records exposed via tracking pixel
Our record
15 Oct 2022
Medium15 Oct 2022
28K patient records exposed in tracking pixel incident
Sector not stated · 28,000 records
28K patient records exposed in tracking pixel incident
Our record
15 Oct 2022
High14 Oct 2022
Tata Power (India)
Sector not stated · Records not stated
Hive ransomware stole corporate data from India's largest private utility
Our record
14 Oct 2022
High14 Oct 2022
Standard Bank (South Africa)
Finance · Records not stated
Employee breach exposed customer account data, internal access abuse
Our record
14 Oct 2022
High14 Oct 2022
Woolworths / MyDeal.com.au
Retail · 2,200,000 records
2.2M customer records exposed through compromised MyDeal CRM credentials
Our record
14 Oct 2022
Critical14 Oct 2022
Woolworths / MyDeal
Retail · 2,200,000 records
2.2M customer records exposed
Our record
14 Oct 2022
High14 Oct 2022
Dropbox
Technology · 4,700,000 records
130 source code repositories stolen via phishing
Our record
14 Oct 2022
Critical13 Oct 2022
Medibank (ahm Health Insurance)
Healthcare · 2,800,000 records
ahm subsidiary of Medibank, 2.8M records compromised in same incident
Our record
13 Oct 2022
Critical13 Oct 2022
Medibank (9.7M Records)
Healthcare · 9,700,000 records
9.7M customer records stolen by REvil, medical claims data published on dark web
Our record
13 Oct 2022
High12 Oct 2022
Gen Digital / Avast
Technology · 422,000 records
422K customer records exposed in credential stuffing
Our record
12 Oct 2022
Medium12 Oct 2022
MidFirst Bank
Finance · 26,000 records
26K customer records exposed
Our record
12 Oct 2022
Medium12 Oct 2022
BayCare Health System
Healthcare · 74,000 records
74K patient records exposed
Our record
12 Oct 2022
High12 Oct 2022
Vinomofo
Technology · Records not stated
500K wine club member records exposed
Our record
12 Oct 2022
Critical12 Oct 2022
Medibank (US subsidiary)
Finance · 9,700,000 records
9.7M records exposed in REvil ransomware attack
Our record
12 Oct 2022
Medium12 Oct 2022
University of Arkansas
Education · Records not stated
33K student records exposed
Our record
12 Oct 2022
Medium10 Oct 2022
Hipp Baby Food (Germany)
Sector not stated · Records not stated
Cyberattack disrupted baby food manufacturer's production systems
Our record
10 Oct 2022
Were you affected?