Weekly briefing No. 41 published 4 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,363
Disclosures in the tracker, all years
2,079
Of those, indexed in 2026
140
Added in October
19
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 29 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

76 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States28 Oct 2026Legacy CooperativeThe source does not say how they got in.Vermont Attorney General
  2. United States28 Oct 2026Metro Tulsa Foot & Ankle SpecialistThe source does not say how they got in.Vermont Attorney General
  3. United States28 Oct 2026Quantum Health, Inc.The source does not say how they got in.Vermont Attorney General
  4. United States27 Oct 2026Directed Trust CompanyThe source does not say how they got in.Vermont Attorney General
  5. United States27 Oct 2026NorthShore Health CentersThe source does not say how they got in.HIPAA Journal
  6. United States27 Oct 2026University of New Mexico Health SystemThe source does not say how they got in.The Record
  7. United States26 Oct 2026Chisholm, Persson & Ball, P.C.The source does not say how they got in.Vermont Attorney General
  8. United States26 Oct 2026Alpha Omega Alpha Honor Medical SocietyThe source does not say how they got in.Vermont Attorney General
  9. United States26 Oct 2026USForex Inc.The source does not say how they got in.California Attorney General
  10. United States26 Oct 2026Monmouth UniversityThe source does not say how they got in.Vermont Attorney General
  11. United States26 Oct 2026Denver Health Medical PlanThe source does not say how they got in.HIPAA Journal
  12. United States24 Oct 2026Brooklyn Counseling ServicesThe source does not say how they got in.Vermont Attorney General
Critical10 Dec 2021
Brazilian Ministry of Health
Government · Records not stated
Lapsus$ defaced and wiped vaccination data for 300M citizens from ConecteSUS
10 Dec 2021
High10 Dec 2021
South Shore Hospital (IL)
Healthcare · 115,000 records
115K patient records exposed
10 Dec 2021
Critical10 Dec 2021
Block / Cash App
Finance · Records not stated
8.2M brokerage customer records stolen by insider
10 Dec 2021
Medium8 Dec 2021
Oak Valley Hospital
Healthcare · 34,000 records
34K patient records exposed in data breach
8 Dec 2021
High7 Dec 2021
South African Government SITA
Government · Records not stated
800,000 government employee records compromised from State IT Agency
7 Dec 2021
Critical5 Dec 2021
Gravatar
Technology · 113,990,759 records
113,990,759 records exposed, Email addresses, Names, Usernames
5 Dec 2021
High4 Dec 2021
Maryland Dept of Health
Government · Records not stated
500K resident records exposed in ransomware attack
4 Dec 2021
Critical4 Dec 2021
Eye Care Leaders
Healthcare · 3,600,000 records
3.6M patient records exposed across multiple ophthalmology practices
4 Dec 2021
Critical3 Dec 2021
Flagstar Bank
Finance · 1,500,000 records
1.5M customer SSNs exposed in data breach
3 Dec 2021
High2 Dec 2021
Nordic Choice Hotels
Sector not stated · Records not stated
Conti ransomware hit Scandinavian hotel chain
2 Dec 2021
Medium29 Nov 2021
NZ Parliament (2021)
Government · Records not stated
Cyberattack on NZ parliamentary counsel office, legislative drafting systems hit
29 Nov 2021
Medium28 Nov 2021
Nationwide Laboratory Services
Healthcare · 33,000 records
33K patient records exposed
28 Nov 2021
High26 Nov 2021
IKEA (email reply chain)
Retail · Records not stated
Internal email systems hijacked via stolen Exchange credentials
26 Nov 2021
Critical24 Nov 2021
Canada Post
Sector not stated · 950,000 records
Supplier Commport Communications breach exposed shipping data for 950K customers
24 Nov 2021
High22 Nov 2021
Logan Health Medical Center
Healthcare · 214,000 records
214K patient records exposed in email breach
22 Nov 2021
High22 Nov 2021
Salvation Army
Sector not stated · Records not stated
170K donor records exposed in data breach
22 Nov 2021
High19 Nov 2021
Vestas Wind Systems (Denmark)
Sector not stated · Records not stated
Cyberattack on world's largest wind turbine maker, internal data compromised
19 Nov 2021
High19 Nov 2021
Vestas Wind Systems
Sector not stated · Records not stated
Ransomware hit largest wind turbine manufacturer
19 Nov 2021
Medium18 Nov 2021
Red Robin Gourmet Burgers
Retail · Records not stated
38K employee records exposed in data breach
18 Nov 2021
Critical17 Nov 2021
IDC Games
Retail · 3,966,871 records
3,966,871 records exposed, Email addresses, Passwords, Usernames
17 Nov 2021
Medium17 Nov 2021
Riau Islands Police (Indonesia)
Government · Records not stated
13,000 police personnel records leaked online
17 Nov 2021
Critical17 Nov 2021
GoDaddy
Technology · Records not stated
1.2M managed WordPress customer records exposed
17 Nov 2021
Critical16 Nov 2021
Ducks Unlimited
Retail · 1,324,364 records
1,324,364 records exposed, Dates of birth, Email addresses, Names, Passwords and 2 more
16 Nov 2021
High16 Nov 2021
South Australian Government (Frontier)
Government · 80,000 records
Frontier Software breach exposed SA government employee payroll data, 80,000 records
16 Nov 2021
Were you affected?