Weekly briefing No. 42 published 30 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,383
Disclosures in the tracker, all years
2,096
Of those, indexed in 2026
17
Added in November
28
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 4 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

77 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Japan29 Oct 2026Japan AirlinesHow they got in: a supplier or vendor that was compromised first.BleepingComputer
  2. Japan29 Oct 2026Sony Network Communications (So-net / Plala ISP)The source does not say how they got in.SecurityWeek
High1 Aug 2026
Essex NHS Trust
Healthcare · 900,000 records
Thousands of patient records stolen in cyber attack, disclosed 6+ months after notification
1 Aug 2026
Critical1 Aug 2026
Otelier
Retail · Records not stated
Data on 500,000+ hotel guests exposed including customers from Marriott, Hilton, Hyatt brands
1 Aug 2026
High1 Aug 2026
New Jersey Law Firm
Legal · 13,000 records
Cyberattack exposed hospital records for nearly 13,000 patients in New Jersey
1 Aug 2026
High1 Aug 2026
SplitVPN
Finance · 865,336 records
865,336 records exposed, Device information, Email addresses, Geographic locations, IP addresses and 1 more
1 Aug 2026
High1 Aug 2026
South Korea Diplomatic Academy
Government · Records not stated
6000 diplomat and MFA employee records stolen
1 Aug 2026
Critical1 Aug 2026
Origin Energy Australia
Sector not stated · 900,000 records
900K customer records accessed by hacker
1 Aug 2026
Critical1 Aug 2026
Suno AI Music Platform
Technology · 55,300,000 records
55.3M accounts exposed with payment data
1 Aug 2026
Critical1 Aug 2026
KDDI
Technology · 12,000,000 records
12M email accounts and 7.6M passwords exposed
1 Aug 2026
Critical1 Aug 2026
US DHS Info Network
Government · Records not stated
Federal security network breached pre-FIFA World Cup
1 Aug 2026
Critical1 Aug 2026
Ernst Young
Finance · Records not stated
SSNs and tax records stolen from helpdesk platform
1 Aug 2026
Critical1 Aug 2026
Abbott Exact Sciences
Healthcare · 30,000,000 records
30M patient records stolen via vishing attack
1 Aug 2026
High1 Aug 2026
Unlimited Technology Systems
Healthcare · 442,000 records
442K patient records exposed in ransomware attack
1 Aug 2026
Critical1 Aug 2026
Abbott / Exact Sciences
Healthcare · 30,000,000 records
30M rows stolen, 1M SSNs exposed
1 Aug 2026
Critical1 Aug 2026
Coca-Cola Fairlife
Sector not stated · Records not stated
1TB data stolen in ransomware attack
1 Aug 2026
High1 Aug 2026
Klue
Technology · Records not stated
200 firms hit via stolen OAuth credentials
1 Aug 2026
Critical1 Aug 2026
Cardiovascular Institute New England
Healthcare · Records not stated
Full medical and financial records confirmed exposed
1 Aug 2026
Critical1 Aug 2026
Nissan Motor
Sector not stated · 53,000 records
SSNs and banking data stolen from US and Canada employees
1 Aug 2026
Critical1 Aug 2026
AssuranceAmerica Insurance
Finance · Records not stated
6.9M driver license numbers stolen
1 Aug 2026
Critical1 Aug 2026
Craneware Healthcare Billing
Healthcare · Records not stated
Patient and customer data stolen from 12K US facilities
1 Aug 2026
High1 Aug 2026
Klue
Technology · Records not stated
200 firms breached via stale Salesforce credential
1 Aug 2026
High1 Aug 2026
Estee Lauder
Retail · Records not stated
SSNs, passports, bank data stolen from employees
1 Aug 2026
Critical1 Aug 2026
Fairlife Coca-Cola
Sector not stated · Records not stated
Ransomware hit production systems, 1TB data stolen
1 Aug 2026
Critical1 Aug 2026
EY Ernst Young
Finance · Records not stated
SSNs, tax records, card numbers stolen from clients
1 Aug 2026
Critical1 Aug 2026
KDDI
Technology · 14,200,000 records
14.2M email credentials exposed at six ISPs
1 Aug 2026
Were you affected?