Weekly briefing No. 42 published 30 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,574
Disclosures in the tracker, all years
2,089
Of those, indexed in 2026
8
Added in November
22
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 3 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

78 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States30 Oct 2026VT Department of LaborThe source does not say how they got in.Vermont Attorney General
  2. United States30 Oct 2026Incredible Technologies,Inc.The source does not say how they got in.Vermont Attorney General
  3. United States30 Oct 2026NCH CorporationThe source does not say how they got in.California Attorney General
  4. United States30 Oct 2026Aesto, LLCThe source does not say how they got in.California Attorney General
  5. United States30 Oct 2026The Nueva SchoolThe source does not say how they got in.California Attorney General
  6. United States30 Oct 2026El Camino HealthThe source does not say how they got in.California Attorney General
  7. United States30 Oct 2026Baanx US Corp.The source does not say how they got in.California Attorney General
  8. United States30 Oct 2026The Krum Public LibraryThe source does not say how they got in.Vermont Attorney General
  9. United States30 Oct 2026Marathon HealthThe source does not say how they got in.Vermont Attorney General
  10. United States29 Oct 2026HCA Healthcare, Inc.The source does not say how they got in.California Attorney General
  11. United States29 Oct 2026Blossom BH Opco Inc.The source does not say how they got in.California Attorney General
  12. United States29 Oct 2026BRANDco., LLCThe source does not say how they got in.Vermont Attorney General
High22 Aug 2022
Montenegro Government
Government · Records not stated
Cuba ransomware disrupted 150 government workstations and 10 servers
Our record
22 Aug 2022
High22 Aug 2022
Baptist Health (Jacksonville FL)
Healthcare · 185,000 records
185K patient records exposed in vendor breach
Our record
22 Aug 2022
Critical22 Aug 2022
Atrium Health (Meta Pixel)
Healthcare · 2,650,000 records
2.65M patient records shared via website tracking code
Our record
22 Aug 2022
Critical21 Aug 2022
Centre Hospitalier de Corbeil-Essonnes
Healthcare · Records not stated
LockBit demanded 10M EUR ransom, 11GB of patient data published
Our record
21 Aug 2022
Medium20 Aug 2022
Colleton County SC
Government · 15,000 records
15K records exposed in ransomware
Our record
20 Aug 2022
High19 Aug 2022
Keystone Health
Healthcare · 235,000 records
235K patient records exposed in ransomware
Our record
19 Aug 2022
High18 Aug 2022
Banorte
Finance · 2,107,000 records
2,107,000 records exposed, Account balances, Email addresses, Genders, Government issued IDs and 3 more
Our record
18 Aug 2022
High18 Aug 2022
Thrivent Financial
Finance · Records not stated
130K member records exposed
Our record
18 Aug 2022
Critical17 Aug 2022
SitePoint
Retail · 1,021,790 records
1,021,790 records exposed, Bios, Email addresses, IP addresses, Names and 2 more
Our record
17 Aug 2022
Critical17 Aug 2022
Banorte Bank (Mexico)
Finance · 1,400,000 records
1.4M customer records offered for sale, Mexico's second largest bank
Our record
17 Aug 2022
Critical17 Aug 2022
Novant Health
Healthcare · 1,360,000 records
1.36M patient records shared via Facebook Pixel tracking
Our record
17 Aug 2022
Medium16 Aug 2022
Shitexpress
Finance · 23,817 records
23,817 records exposed, Email addresses, IP addresses, Names, Physical addresses and 2 more
Our record
16 Aug 2022
High16 Aug 2022
City of Bardstown KY
Government · Records not stated
Ransomware encrypted city systems
Our record
16 Aug 2022
Medium15 Aug 2022
Wealthsimple
Finance · Records not stated
Social engineering attack targeted employee accounts
Our record
15 Aug 2022
High15 Aug 2022
South Staffordshire Water (UK)
Sector not stated · Records not stated
Clop ransomware hit water company, customer data stolen, supply not affected
Our record
15 Aug 2022
Medium15 Aug 2022
Town of Cochrane (Alberta)
Government · Records not stated
Ransomware disrupted municipal services, recreation and administration impacted
Our record
15 Aug 2022
Medium15 Aug 2022
Knox County Schools (TN)
Education · Records not stated
65K student records exposed in data breach
Our record
15 Aug 2022
Critical15 Aug 2022
Nespresso
Retail · 2,500,000 records
2.5M customer records exposed
Our record
15 Aug 2022
High15 Aug 2022
moneylion
Finance · 250,000 records
250K customer records exposed
Our record
15 Aug 2022
Critical15 Aug 2022
Community Health Network (Indiana)
Healthcare · 1,500,000 records
1.5M patient records shared via website tracking code
Our record
15 Aug 2022
Medium14 Aug 2022
Avalon Healthcare
Healthcare · 22,000 records
22K patient records exposed in breach
Our record
14 Aug 2022
High13 Aug 2022
Twitter
Technology · 6,682,453 records
6,682,453 records exposed, Bios, Email addresses, Geographic locations, Names and 3 more
Our record
13 Aug 2022
Critical12 Aug 2022
LastPass (Global Impact)
Technology · 30,000,000 records
30M user vault data stolen, encrypted passwords and unencrypted URLs
Our record
12 Aug 2022
High12 Aug 2022
MailChimp (2022)
Technology · Records not stated
133 customer accounts compromised via social engineering
Our record
12 Aug 2022
Were you affected?