Weekly briefing No. 42 published 30 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,609
Disclosures in the tracker, all years
2,123
Of those, indexed in 2026
45
Added in November
45
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 7 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

77 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Japan29 Oct 2026Japan AirlinesHow they got in: a supplier or vendor that was compromised first.BleepingComputer
  2. Japan29 Oct 2026Sony Network Communications (So-net / Plala ISP)The source does not say how they got in.SecurityWeek
Critical1 Mar 2026
Marquis
Finance · 672,000 records
Ransomware attack stole personal and financial data of over 672,000 people from fintech company
1 Mar 2026
High1 Mar 2026
Organisation not named
Education · Records not stated
The disclosure as indexed does not name the organisation.
Driver's license numbers and voter information from Multiethnic Cohort Study exposed in ransomware attack
1 Mar 2026
Critical1 Mar 2026
Fortinet FortiGate
Technology · Records not stated
73,932 FortiGate systems exposed with valid administrative and VPN credentials
1 Mar 2026
High1 Mar 2026
Multiethnic Cohort Study data
Education · Records not stated
Multiethnic Cohort Study data leaked following ransomware attack including driver's license numbers
1 Mar 2026
Critical1 Mar 2026
CISA (US Government)
Government · Records not stated
US agency breached through Cisco vulnerability, FIRESTARTER backdoor malware allowed persistent access through March
1 Mar 2026
High1 Mar 2026
Ransomware attack data
Education · Records not stated
Ransomware attack data leak from Multiethnic Cohort Study exposed driver's license numbers and voter registration data
1 Mar 2026
Critical1 Mar 2026
TriZetto (Year-long hack)
Healthcare · 3,400,000 records
Year-long network hack exposed records on 3.4 million people
1 Mar 2026
High1 Mar 2026
Foster City Government
Government · Records not stated
Ransomware attack forced city computer systems offline for days
1 Mar 2026
Critical1 Mar 2026
CISA (US Department)
Government · Records not stated
Breached through Cisco vulnerability; FIRESTARTER backdoor allowed persistent access through March 2026
1 Mar 2026
High1 Mar 2026
Partnered Health
Healthcare · Records not stated
Personal information and medical details breached across 21 clinics in Australian healthcare provider attack
1 Mar 2026
High1 Mar 2026
Organisation not named
Legal · 13,000 records
The disclosure as indexed does not name the organisation.
13,000 patient records in New Jersey exposed through cyberattack on law firm representing state hospitals
1 Mar 2026
High1 Mar 2026
Ransomware attack resulted in data
Education · Records not stated
Ransomware attack resulted in data leak including driver's license numbers and voter registration data
1 Mar 2026
Critical1 Mar 2026
Canada Life
Finance · 5,500,000 records
Threat actor claimed 5.5 million records allegedly tied to Canada's biggest insurer for sale on cybercrime marketplace
1 Mar 2026
High1 Mar 2026
Ericsson
Technology · 15,661 records
Vishing attack exposed data of 15,661 people including SSNs, financial and medical records
1 Mar 2026
High1 Mar 2026
Lehigh Carbon Community College
Education · Records not stated
Data breach caused extended school closure, extent of exposure unclear
1 Mar 2026
Critical1 Mar 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
US agency breached through Cisco vulnerability; FIRESTARTER backdoor allowed persistent access through March 2026
1 Mar 2026
High1 Mar 2026
Ransomware attack caused data
Healthcare · Records not stated
Ransomware attack caused data leak exposing patient information from Multiethnic Cohort Study including driver's license and voter data
1 Mar 2026
Critical1 Mar 2026
IDMerit
Technology · Records not stated
Unprotected database exposed 1 billion identity records used by banks and identity verification
1 Mar 2026
High1 Mar 2026
CareCloud
Healthcare · Records not stated
Healthcare software firm informed SEC of potential patient data leak; electronic health records may have been leaked after system intrusion
1 Mar 2026
High1 Mar 2026
Companies House UK
Government · Records not stated
Data exposed during five-month security issue affecting UK firm records
1 Mar 2026
High1 Mar 2026
UK Companies House
Government · Records not stated
Data exposed during five-month security issue affecting all UK firms' records
1 Mar 2026
High1 Mar 2026
Foster City
Government · Records not stated
Ransomware attack forced city computer system offline; state of emergency declared
1 Mar 2026
High1 Mar 2026
University of Hawaiʻi Cancer Center
Education · Records not stated
Data leak following ransomware attack exposing Multiethnic Cohort Study data including driver's license and voter IDs
1 Mar 2026
Critical1 Mar 2026
PIH Health
Healthcare · 2,950,000 records
Healthcare provider notified 2.95 million patients of 2024 hacking incident/ransomware
1 Mar 2026
Were you affected?