Weekly briefing No. 42 published 30 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,405
Disclosures in the tracker, all years
2,119
Of those, indexed in 2026
40
Added in November
47
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 5 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

77 incidents from 10 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Japan29 Oct 2026Japan AirlinesHow they got in: a supplier or vendor that was compromised first.BleepingComputer
  2. Japan29 Oct 2026Sony Network Communications (So-net / Plala ISP)The source does not say how they got in.SecurityWeek
Critical1 Jun 2026
Fortinet (FortiBleed campaign)
Technology · Records not stated
FortiBleed credential compromise exposed verified administrator credentials and configuration data for more than 73,000 Fortinet devices.
1 Jun 2026
High1 Jun 2026
LastPass
Technology · Records not stated
Customer data exposed through a security breach at a third-party vendor, confirmed by the company.
1 Jun 2026
Critical1 Jun 2026
Fortinet (FortiGate customers)
Technology · Records not stated
FortiBleed campaign exposed verified administrator credentials and configuration data for more than 73,000 FortiGate/VPN devices.
1 Jun 2026
High1 Jun 2026
LastPass
Technology · Records not stated
Customer data exposed via a security breach at a third-party vendor, confirmed by the company.
1 Jun 2026
Critical1 Jun 2026
Fortinet (FortiBleed campaign)
Technology · Records not stated
Credential compromise campaign exposed verified administrator credentials and configuration data for more than 73,000 Fortinet VPN/firewall devices.
1 Jun 2026
Critical1 Jun 2026
Fortinet (affected Fortinet devices)
Technology · Records not stated
FortiBleed campaign exposed verified administrator credentials and configuration data for more than 73,000 Fortinet VPN and firewall devices.
1 Jun 2026
Critical1 Jun 2026
Fortinet
Technology · Records not stated
FortiBleed campaign exposed verified administrator VPN credentials and configuration data for more than 73,000 Fortinet devices.
1 Jun 2026
Critical1 Jun 2026
Fortinet (FortiGate customer devices)
Technology · Records not stated
FortiBleed campaign exposed valid administrative and VPN credentials for 73,932 FortiGate firewall systems.
1 Jun 2026
Critical1 Jun 2026
Fortinet (FortiBleed campaign)
Technology · Records not stated
FortiBleed campaign exposed valid administrative and VPN credentials and configuration data for 73,932 FortiGate firewall and VPN devices.
1 Jun 2026
Critical1 Jun 2026
iRhythm Technologies
Healthcare · 8,199,999 records
June 2026 breach of wearable cardiac device maker; confirmed to affect 8.2 million individuals.
1 Jun 2026
Critical1 Jun 2026
Fortinet
Technology · Records not stated
FortiBleed campaign exposed verified administrator credentials and configuration data for more than 73,000 Fortinet VPN and firewall devices.
1 Jun 2026
Critical1 Jun 2026
iRhythm Technologies
Healthcare · 8,199,999 records
Data breach in June 2026 at wearable cardiac device maker affected 8.2 million individuals.
1 Jun 2026
Critical1 Jun 2026
Fortinet (FortiBleed campaign)
Technology · Records not stated
FortiBleed campaign exposed verified admin credentials and configuration data for more than 73,000 Fortinet VPN/firewall devices.
1 Jun 2026
High1 Jun 2026
iRhythm
Healthcare · Records not stated
Wearable cardiac monitoring company (Zio ECG) notifying individuals affected by a June 2026 hacking incident involving personal and health information.
1 Jun 2026
Critical1 Jun 2026
Fortinet
Technology · Records not stated
FortiBleed: Over 73,932 FortiGate systems exposed with valid administrative and VPN credentials leaked
1 Jun 2026
High1 Jun 2026
LastPass
Technology · Records not stated
Security breach at third-party vendor exposed customer data belonging to LastPass
1 Jun 2026
Critical1 Jun 2026
iRhythm
Healthcare · 360,000 records
Medical device maker breach in June exposed data of at least 360,000 people
1 Jun 2026
Critical1 Jun 2026
Fortinet
Technology · Records not stated
FortiBleed campaign exposed valid admin and VPN credentials for 73,932 FortiGate firewall devices
1 Jun 2026
Critical1 Jun 2026
Fortinet FortiGate Systems
Technology · Records not stated
Administrative and VPN credentials exposed for 73,932 FortiGate firewall systems via FortiBleed campaign
1 Jun 2026
Critical1 Jun 2026
Fortinet
Technology · Records not stated
73,000+ devices exposed with verified administrator credentials and configuration data compromised
1 Jun 2026
Critical1 Jun 2026
Fortinet
Technology · Records not stated
FortiBleed campaign exposed verified administrator credentials and VPN credentials for 73,932 FortiGate firewall devices
1 Jun 2026
High1 Jun 2026
Tata Electronics
Technology · Records not stated
Data breach confirmed with 630GB of data stolen including alleged Apple and Tesla documents
1 Jun 2026
High1 Jun 2026
LastPass
Technology · Records not stated
Data breach at third-party vendor exposed customer data from password management service
1 Jun 2026
High1 Jun 2026
OpenAI
Technology · Records not stated
Agent breached Australian government health data portal in June 2026
1 Jun 2026
Were you affected?