Weekly briefing No. 42 published 30 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,377
Disclosures in the tracker, all years
2,093
Of those, indexed in 2026
12
Added in November
26
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 3 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

78 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Canada31 Oct 2026ChainalysisHow they got in: automated AI tools that work through many organizations at once.BleepingComputer
  2. Canada29 Oct 2026McCarthy Tétrault (with Davies also reporting a breach)The source does not say how they got in.The Globe and Mail
  3. Canada23 Oct 2026Crime Stoppers programs in OntarioHow they got in: a supplier or vendor that was compromised first.Global News
  4. Canada22 Oct 2026Toronto Crime StoppersHow they got in: a supplier or vendor that was compromised first.Global News
Critical8 May 2020
Organisation not named
Legal · Records not stated
The disclosure as indexed does not name the organisation.
REvil ransomware stole 756GB of celebrity and corporate client data
8 May 2020
Critical8 May 2020
Organisation not named
Legal · Records not stated
The disclosure as indexed does not name the organisation.
REvil ransomware stole 756GB of celebrity and corporate client data
8 May 2020
Critical8 May 2020
Organisation not named
Legal · Records not stated
The disclosure as indexed does not name the organisation.
REvil ransomware stole 756GB of celebrity and corporate client data
8 May 2020
Critical8 May 2020
Organisation not named
Legal · Records not stated
The disclosure as indexed does not name the organisation.
REvil ransomware stole 756GB of celebrity and corporate client data
8 May 2020
Critical8 May 2020
Organisation not named
Legal · Records not stated
The disclosure as indexed does not name the organisation.
REvil ransomware stole 756GB of celebrity and corporate client data
8 May 2020
Critical8 May 2020
Organisation not named
Legal · Records not stated
The disclosure as indexed does not name the organisation.
REvil ransomware stole 756GB of celebrity and corporate client data
8 May 2020
Critical8 May 2020
Organisation not named
Legal · Records not stated
The disclosure as indexed does not name the organisation.
REvil ransomware stole 756GB of celebrity and corporate client data
8 May 2020
Critical8 May 2020
Organisation not named
Legal · Records not stated
The disclosure as indexed does not name the organisation.
REvil ransomware stole 756GB of celebrity and corporate client data
8 May 2020
Critical8 May 2020
Organisation not named
Legal · Records not stated
The disclosure as indexed does not name the organisation.
REvil ransomware stole 756GB of celebrity and corporate client data
8 May 2020
Critical8 May 2020
Organisation not named
Legal · Records not stated
The disclosure as indexed does not name the organisation.
REvil ransomware stole 756GB of celebrity and corporate client data
8 May 2020
Critical8 May 2020
Organisation not named
Legal · Records not stated
The disclosure as indexed does not name the organisation.
REvil ransomware stole 756GB of celebrity and corporate client data
8 May 2020
Critical8 May 2020
Organisation not named
Legal · Records not stated
The disclosure as indexed does not name the organisation.
REvil ransomware stole 756GB of celebrity and corporate client data
8 May 2020
Critical8 May 2020
Organisation not named
Legal · Records not stated
The disclosure as indexed does not name the organisation.
REvil ransomware stole 756GB of celebrity and corporate client data
8 May 2020
High8 May 2020
Ulmon
Retail · 777,769 records
777,769 records exposed, Bios, Email addresses, Names, Passwords and 2 more
8 May 2020
Critical8 May 2020
Organisation not named
Legal · Records not stated
The disclosure as indexed does not name the organisation.
REvil ransomware stole 756GB of celebrity and corporate client data
8 May 2020
High7 May 2020
Unacademy (India)
Education · 22,000,000 records
22M user records stolen from Indian edtech unicorn, emails, passwords, usernames
7 May 2020
Critical7 May 2020
Medical Informatics Engineering
Healthcare · 3,900,000 records
3.9M patient records exposed
7 May 2020
Critical5 May 2020
CAM4 (adult site)
Technology · 10,880,000,000 records
10.88B records exposed in Elasticsearch misconfiguration
5 May 2020
High4 May 2020
Elanic
Retail · 2,325,283 records
2,325,283 records exposed, Email addresses, Geographic locations, Usernames
4 May 2020
Critical4 May 2020
Door Dash (2020)
Retail · 4,900,000 records
4.9M user records exposed in third-party vendor breach
4 May 2020
Critical3 May 2020
TaiLieu
Education · 7,327,477 records
7,327,477 records exposed, Dates of birth, Email addresses, Genders, Geographic locations and 4 more
3 May 2020
Critical3 May 2020
Unacademy
Technology · 22,000,000 records
22M user records exposed
3 May 2020
Critical2 May 2020
Tokopedia
Retail · 71,443,698 records
71,443,698 records exposed, Dates of birth, Email addresses, Genders, Names and 1 more
2 May 2020
Critical2 May 2020
Tokopedia (Indonesia)
Retail · 91,000,000 records
91M user records stolen from Indonesia's largest e-commerce platform
2 May 2020
Were you affected?