Weekly briefing No. 42 published 30 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,609
Disclosures in the tracker, all years
2,123
Of those, indexed in 2026
45
Added in November
45
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 7 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

78 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Canada5 Nov 2026Burnaby School DistrictThe source does not say how they got in.CBC News
  2. Canada3 Nov 2026Central Okanagan School DistrictThe source does not say how they got in.CBC News
  3. Canada31 Oct 2026ChainalysisHow they got in: automated AI tools that work through many organizations at once.BleepingComputer
  4. Canada29 Oct 2026McCarthy Tétrault (with Davies also reporting a breach)The source does not say how they got in.The Globe and Mail
High3 Mar 2026
Provecho
Technology · 712,904 records
712,904 records exposed, Email addresses, Usernames
3 Mar 2026
Medium2 Mar 2026
Quitbro
Technology · 22,874 records
22,874 records exposed, Email addresses, Partial dates of birth, Usernames
2 Mar 2026
Medium2 Mar 2026
Lovora
Technology · 495,556 records
495,556 records exposed, Display names, Email addresses, Profile photos
2 Mar 2026
High2 Mar 2026
KomikoAI
Technology · 1,060,191 records
1,060,191 records exposed, AI prompts, Email addresses, Forum posts, Names
2 Mar 2026
Critical1 Mar 2026
UK Biobank
Healthcare · Records not stated
Confidential health records from the UK Biobank research project were exposed online, leaked dozens of times per Guardian investigation.
1 Mar 2026
High1 Mar 2026
UK BioBank
Healthcare · Records not stated
Confidential health records from the medical research project were exposed online, leaked dozens of times per Guardian investigation.
1 Mar 2026
Critical1 Mar 2026
UK Biobank
Healthcare · Records not stated
Confidential health records from the UK Biobank research project were found exposed online, leaked dozens of times per Guardian investigation.
1 Mar 2026
High1 Mar 2026
Ernst & Young (EY)
Sector not stated · Records not stated
Unauthorized third party accessed a third-party IT service management platform used by EY's IT support, exposing sensitive client information.
1 Mar 2026
Critical1 Mar 2026
Loblaw
Retail · Records not stated
Grocer's March data breach affected about 2 million Canadian customers; names, email addresses, and dates of birth may have been exposed.
1 Mar 2026
High1 Mar 2026
Ernst & Young (EY)
Sector not stated · Records not stated
Third-party IT support platform compromise in March and April 2026 exposed sensitive client information.
1 Mar 2026
High1 Mar 2026
Ernst & Young (EY)
Sector not stated · Records not stated
Compromise of a third-party IT support platform exposed sensitive client information.
1 Mar 2026
High1 Mar 2026
Ernst & Young (EY)
Sector not stated · Records not stated
Compromise of a third-party IT support platform in March and April 2026 exposed sensitive client information.
1 Mar 2026
High1 Mar 2026
Ernst & Young (EY)
Sector not stated · Records not stated
Compromise of a third-party IT support platform in March and April 2026 exposed sensitive client information at EY, one of the largest professional services firms.
1 Mar 2026
High1 Mar 2026
Ernst & Young
Legal · Records not stated
Third-party IT support platform compromise exposed sensitive client information in March-April 2026
1 Mar 2026
Critical1 Mar 2026
UK BioBank
Healthcare · Records not stated
Confidential health records from medical research project leaked online multiple times
1 Mar 2026
High1 Mar 2026
CareCloud
Healthcare · Records not stated
Electronic health records of patients leaked after unauthorized system access
1 Mar 2026
Critical1 Mar 2026
UK BioBank
Healthcare · Records not stated
Confidential health records from flagship medical research project leaked and exposed online multiple times
1 Mar 2026
Critical1 Mar 2026
UK BioBank
Healthcare · Records not stated
Confidential health records from medical research project exposed online, leaked dozens of times
1 Mar 2026
Critical1 Mar 2026
Trizetto Provider Solutions
Healthcare · 3,400,000 records
Unauthorized IT environment access exposing PHI of 3.4 million individuals
1 Mar 2026
High1 Mar 2026
Foster City (government)
Government · Records not stated
Ransomware attack forced city computer systems offline
1 Mar 2026
High1 Mar 2026
Foster City
Government · Records not stated
Ransomware attack forced city computer systems offline
1 Mar 2026
High1 Mar 2026
Berlin Government
Government · Records not stated
Rhysida ransomware attack with claimed data theft before elections
1 Mar 2026
High1 Mar 2026
Foster City
Government · Records not stated
Ransomware attack on city computer network forcing system offline
1 Mar 2026
Critical1 Mar 2026
CareCloud
Healthcare · Records not stated
Healthcare software firm informed SEC of potential patient data leak after hackers accessed electronic health records systems
1 Mar 2026
Were you affected?