Weekly briefing No. 42 published 30 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,376
Disclosures in the tracker, all years
2,090
Of those, indexed in 2026
8
Added in November
22
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 3 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

78 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Brazil2 Nov 2026Mercado BitcoinThe source does not say how they got in.The Record
Critical1 Oct 2026
Quest Diagnostics
Healthcare · Records not stated
Cyberattack compromised patients' personal and health data; the number of affected patients was not specified at disclosure.
1 Oct 2026
Critical1 Oct 2026
Capcom
Technology · 11,000,000 records
Hackers stole 11 million+ email addresses (11.77M CAPCOM ID records) and changed passwords on 196 accounts; users warned of phishing.
1 Oct 2026
High1 Oct 2026
ASOS
Retail · Records not stated
Unidentified third party accessed app systems without authorization; company warns customer data may be compromised. Shares fell nearly 10%.
1 Oct 2026
High1 Oct 2026
Organisation not named
Sector not stated · 1,600,000 records
The disclosure as indexed does not name the organisation.
Utility account breach notifying about 400,000 Georgia Power and Alabama Power customers; Alabama Power portion affected about 100,000 of 1.6 million accounts.
1 Oct 2026
High1 Oct 2026
Organisation not named
Education · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack on UIC College of Medicine resulted in theft of some information.
1 Oct 2026
High1 Oct 2026
Data breach
Finance · Records not stated
Data breach exposed customer data. SBI says it individually notified all affected customers and that account balances and funds are not impacted.
1 Oct 2026
Critical1 Oct 2026
Capcom
Technology · Records not stated
Hackers stole 11,774,247 CAPCOM ID account records (emails); 196 account passwords were reset. Payment cards were not affected. Phishing warning issued.
1 Oct 2026
High1 Oct 2026
Unnamed Houston-area school district
Education · 38,000 records
Data breach exposed personal information of roughly 38,000 people.
1 Oct 2026
High1 Oct 2026
ASOS
Retail · Records not stated
Hackers compromised a third-party communication platform and sent rogue notifications to ASOS users after a confirmed cyberattack and data breach.
1 Oct 2026
High1 Oct 2026
Capcom
Technology · Records not stated
Capcom confirmed unauthorized access to its online account system, exposing users' personal information.
1 Oct 2026
High1 Oct 2026
Organisation not named
Education · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack on the UIC College of Medicine resulted in theft of some information.
1 Oct 2026
High1 Oct 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Customer data was identified in a recent breach; SBI says it individually notified all affected customers and that account balances and funds are safe.
1 Oct 2026
Critical1 Oct 2026
Capcom (CAPCOM ID)
Technology · 11,700,000 records
Third party gained unauthorized access to CAPCOM ID customer data; about 11.7 million email addresses stolen and passwords reset on 196 accounts.
1 Oct 2026
Critical1 Oct 2026
Quest Diagnostics
Healthcare · Records not stated
Lab testing company confirmed a cyberattack exposing patients' personal and health data via its lab services platform; total number of affected individuals not yet specified.
1 Oct 2026
High1 Oct 2026
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Customer personal information in the More Rewards loyalty database was stolen; confirmed by Pattison Food Group on Oct 16, affecting four chains.
1 Oct 2026
High1 Oct 2026
Gainwell Technologies
Healthcare · Records not stated
Kentucky Medicaid provider-portal breach; third Gainwell provider-portal incident in 2026 using the same attack vector.
1 Oct 2026
Critical1 Oct 2026
Labcorp
Healthcare · Records not stated
Labcorp agreed to a $2.3M settlement with 44 state attorneys general over a debt collector data breach exposing patient information.
1 Oct 2026
High1 Oct 2026
Zizzl LLC
Sector not stated · Records not stated
Zizzl LLC confirmed in state notification filings a data breach exposing 519 Social Security numbers.
1 Oct 2026
Critical1 Oct 2026
Canadian Crime Stoppers
Sector not stated · Records not stated
CBC investigation confirmed over 1.5 million tips sent to Canadian Crime Stoppers chapters were captured and leaked in a hack.
1 Oct 2026
High1 Oct 2026
Organisation not named
Healthcare · 5,461 records
The disclosure as indexed does not name the organisation.
Data breach affected 5,461 patients, exposing sensitive health information.
1 Oct 2026
High1 Oct 2026
Zizzl LLC
Sector not stated · Records not stated
Breach exposed 519 Social Security numbers, confirmed in official state notification filings.
1 Oct 2026
High1 Oct 2026
Pattison Food Group (Save-On-Foods)
Retail · Records not stated
Confirmed customer personal information in the More Rewards loyalty database was exposed.
1 Oct 2026
Critical1 Oct 2026
Organisation not named
Education · Records not stated
The disclosure as indexed does not name the organisation.
Sensitive data of millions of California students stolen in a breach at contractor Educational Testing Service.
1 Oct 2026
High1 Oct 2026
Houston-area school district (unnamed)
Education · 38,000 records
Data breach exposed personal information of roughly 38,000 people, per local reporting.
1 Oct 2026
Were you affected?