Weekly briefing No. 42 published 30 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,574
Disclosures in the tracker, all years
2,089
Of those, indexed in 2026
8
Added in November
22
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 3 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

78 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States30 Oct 2026VT Department of LaborThe source does not say how they got in.Vermont Attorney General
  2. United States30 Oct 2026Incredible Technologies,Inc.The source does not say how they got in.Vermont Attorney General
  3. United States30 Oct 2026NCH CorporationThe source does not say how they got in.California Attorney General
  4. United States30 Oct 2026Aesto, LLCThe source does not say how they got in.California Attorney General
  5. United States30 Oct 2026The Nueva SchoolThe source does not say how they got in.California Attorney General
  6. United States30 Oct 2026El Camino HealthThe source does not say how they got in.California Attorney General
  7. United States30 Oct 2026Baanx US Corp.The source does not say how they got in.California Attorney General
  8. United States30 Oct 2026The Krum Public LibraryThe source does not say how they got in.Vermont Attorney General
  9. United States30 Oct 2026Marathon HealthThe source does not say how they got in.Vermont Attorney General
  10. United States29 Oct 2026HCA Healthcare, Inc.The source does not say how they got in.California Attorney General
  11. United States29 Oct 2026Blossom BH Opco Inc.The source does not say how they got in.California Attorney General
  12. United States29 Oct 2026BRANDco., LLCThe source does not say how they got in.Vermont Attorney General
High3 Sep 2022
500K student records exposed in Vice Society ransomware
Education · Records not stated
500K student records exposed in Vice Society ransomware
Our record
3 Sep 2022
High3 Sep 2022
500K student records exposed in Vice Society ransomware
Education · Records not stated
500K student records exposed in Vice Society ransomware
Our record
3 Sep 2022
High3 Sep 2022
500K student records exposed in Vice Society ransomware
Education · Records not stated
500K student records exposed in Vice Society ransomware
Our record
3 Sep 2022
High3 Sep 2022
500K student records exposed in Vice Society ransomware
Education · Records not stated
500K student records exposed in Vice Society ransomware
Our record
3 Sep 2022
High3 Sep 2022
500K student records exposed in Vice Society ransomware
Education · Records not stated
500K student records exposed in Vice Society ransomware
Our record
3 Sep 2022
High3 Sep 2022
500K student records exposed in Vice Society ransomware
Education · Records not stated
500K student records exposed in Vice Society ransomware
Our record
3 Sep 2022
High3 Sep 2022
500K student records exposed in Vice Society ransomware
Education · Records not stated
500K student records exposed in Vice Society ransomware
Our record
3 Sep 2022
High2 Sep 2022
Gestore Servizi Energetici (Italy)
Sector not stated · Records not stated
BlackCat ransomware attacked Italian national energy agency
Our record
2 Sep 2022
High2 Sep 2022
7-Eleven
Retail · Records not stated
Customer mobile app accounts compromised in credential stuffing
Our record
2 Sep 2022
High2 Sep 2022
Samsung
Technology · Records not stated
Customer records including names, contacts, DOBs exposed
Our record
2 Sep 2022
Critical1 Sep 2022
Optus
Technology · Records not stated
2022 cyber attack exposed customer data; Australian privacy regulator sued over breach
Our recordOriginal disclosure
1 Sep 2022
Medium1 Sep 2022
Clearfield Inc
Sector not stated · 24,000 records
24K records exposed in data breach
Our record
1 Sep 2022
Medium1 Sep 2022
AnesthesiaWeb Inc
Healthcare · 54,000 records
54K patient records exposed
Our record
1 Sep 2022
High1 Sep 2022
OakBend Medical Center
Healthcare · 500,000 records
500K patient records exposed in Daixin ransomware
Our record
1 Sep 2022
Critical31 Aug 2022
Stripchat
Technology · 10,001,355 records
10,001,355 records exposed, Email addresses, IP addresses, Usernames
Our record
31 Aug 2022
Critical30 Aug 2022
START
Government · 7,455,386 records
7,455,386 records exposed, Email addresses, Geographic locations, Names, Passwords
Our record
30 Aug 2022
Critical25 Aug 2022
TAP Air Portugal
Sector not stated · 1,500,000 records
Ragnar Locker published 1.5M customer records, passport and ID data exposed
Our record
25 Aug 2022
Critical25 Aug 2022
DoorDash
Technology · 4,900,000 records
4.9M customer, driver, and merchant records exposed
Our record
25 Aug 2022
Critical25 Aug 2022
LastPass
Technology · 33,000,000 records
Encrypted password vaults of 33M users stolen in two-phase breach
Our record
25 Aug 2022
Medium24 Aug 2022
Sephora
Retail · 78,000 records
78K customer records exposed, $1.2M CCPA fine
Our record
24 Aug 2022
Critical24 Aug 2022
Plex
Technology · 15,000,000 records
15M user accounts including emails and encrypted passwords compromised
Our record
24 Aug 2022
Medium24 Aug 2022
Socorro ISD (TX)
Education · Records not stated
15K student records exposed in data breach
Our record
24 Aug 2022
Medium24 Aug 2022
Homebridge Financial
Finance · Records not stated
93K mortgage customer records exposed
Our record
24 Aug 2022
Medium22 Aug 2022
Taiga Building Products (Canada)
Sector not stated · Records not stated
Ransomware disrupted Canadian building products distributor
Our record
22 Aug 2022
Were you affected?