Weekly briefing No. 42 published 30 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,366
Disclosures in the tracker, all years
2,082
Of those, indexed in 2026
146
Added in October
23
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 30 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Twelve months

Disclosures indexed each month.

Counted on the date each disclosure was recorded in the index. The current month is shown in red and is still open. A phone shows the last six months.

Source: LeakTrace index, 30 Oct 2026.
Worldwide · How they got in

Incidents worldwide, by country.

78 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Russia23 Oct 2026PingCAPHow they got in: stolen or reused passwords.SecurityWeek
Medium30 Oct 2026
Fashion retailer Resolve
Finance · Records not stated
The company, billing itself as “the next-generation fashion retailer for Millennial and Generation Z consumers,” said a recent hack exposed customer payment card numbers.
30 Oct 2026
Critical30 Oct 2026
Florida
Finance · 4,900,000 records
The state’s Department of Education (FLDOE) said on Thursday it became aware of a data breach involving the Florida Student Financial Aid website on October 19.
30 Oct 2026
Critical30 Oct 2026
Binance
Finance · Records not stated
Binance, the world's largest cryptocurrency exchange, confirmed Thursday that it had been hacked in a $6.3 billion cyber heist that blockchain investigators are blaming on North Korea.
30 Oct 2026
Critical30 Oct 2026
Beyond deterministic worms
Healthcare · Records not stated
In May 2017, the WannaCry cryptoworm spread across the internet, compromising more than 200,000 computers in at least 100 countries. The National Audit Office called it the largest cyberattack ever to hit the NHS in…
30 Oct 2026
High30 Oct 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
A hacker leaks personal data on more than 40,000 DHS employees, including CBP, ICE and CISA staff, after an undisclosed breach. Personal details of thousands of U.S. Department of Homeland Security (DHS) employees are…
30 Oct 2026
Medium30 Oct 2026
ThreatsDay
Technology · Records not stated
Some attacks take real skill. Others just need someone to leave a door open. This week has both. Exposed passwords, old bugs still getting exploited, and trusted software doing things it shouldn't. There's a strange…
30 Oct 2026
Medium29 Oct 2026
Japan Airlines
Sector not stated · 92,000 records
Japan Airlines (JAL) has announced that a data breach at Amadeus's Passenger Service System exposed the data of about 92,000 customers.
29 Oct 2026
Critical29 Oct 2026
Florida education department
Finance · 4,900,000 records
Eric Weiss reports: The Florida Department of Education says a breach of its student financial aid website may have exposed personal information, including Social Security numbers, belonging to approximately 4.9…
29 Oct 2026
Medium29 Oct 2026
Federal bankruptcy courts contractor
Government · Records not stated
"No data was extracted,” a spokesperson for BAE Systems, a federal contractor, told Recorded Future News about its probe into a cyberattack against its systems for federal bankruptcy courts.
29 Oct 2026
Medium29 Oct 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
The personal and work information was allegedly stolen from an Okta single sign-on system earlier this year. The post Over 41,000 DHS Employee Records Leaked Online appeared first on SecurityWeek.
29 Oct 2026
Medium28 Oct 2026
Japan Airlines
Sector not stated · 2,000 records
Hackers stole passport numbers, frequent flyer numbers, email addresses and phone numbers for about 2,000 customers.
28 Oct 2026
Critical28 Oct 2026
Sony Network Communications has
Sector not stated · 2,500,000 records
Sony Network Communications has confirmed a data breach that compromised approximately 2.5 million records containing current and former customers' personal information.
28 Oct 2026
Critical28 Oct 2026
JPN
Finance · 1,460,000 records
Maddie Baker and Spencer Landers As cyberattacks continue across Japan, companies are coming to realize the great financial risk of such attacks if their lax cybersecurity systems cause millions of peoples’ personal…
28 Oct 2026
Medium27 Oct 2026
The University of Copenhagen in Denmark
Education · 525,000 records
Bill Toulas reports: The University of Copenhagen in Denmark confirmed that hackers accessed one of its test environments containing personal data belonging to 525,000 people. The educational organization detected the…
27 Oct 2026
Critical27 Oct 2026
Organisation not named
Sector not stated · 11,000,000 records
The disclosure as indexed does not name the organisation.
The following is a machine translation of an article that originally appeared in Russian. Boris Piletskiy writes: On October 22, Capcom acknowledged a massive user data breach. A hacker managed to breach Capcom ID and…
27 Oct 2026
Medium27 Oct 2026
Warp
Sector not stated · Records not stated
Agent decision logs and telemetry data belonging to Warp agentic development environment users were exposed in an attack on a third-party vendor in the project's infrastructure.
27 Oct 2026
Medium27 Oct 2026
Energy giant ENGIE
Technology · Records not stated
French energy giant ENGIE, one of the world's largest power and natural gas providers, confirmed that attackers stole customer data after breaching a marketing platform used by business partners.
27 Oct 2026
High27 Oct 2026
TeamUpdraft
Technology · Records not stated
Attackers used exposed UpdraftCentral credentials to install malicious plugins and gain persistent access to connected WordPress sites.
27 Oct 2026
Medium27 Oct 2026
AfD
Government · 345,439 records
345,439 records exposed, Email addresses, Email messages
27 Oct 2026
Medium26 Oct 2026
Organisation not named
Education · 525,000 records
The disclosure as indexed does not name the organisation.
The University of Copenhagen in Denmark confirmed that hackers accessed one of its test environments containing personal data belonging to 525,000 people.
26 Oct 2026
High26 Oct 2026
Popular AI tool LiteLLM
Sector not stated · Records not stated
LiteLLM, an open-source tool widely used by artificial intelligence developers, said a key accidentally exposed in May was behind a supply-chain attack that is believed to have hit tens of thousands of users last week.
26 Oct 2026
Medium24 Oct 2026
TeamUpdraft (UpdraftCentral)
Technology · Records not stated
Exposed UpdraftCentral credentials were used by attackers to install malicious plugins and establish persistent access on connected WordPress sites.
24 Oct 2026
High24 Oct 2026
Crime Stoppers (Canada)
Sector not stated · Records not stated
Data hack described by CBC as potentially one of the most harmful data breaches in Canada; extent revealed in an exclusive investigation.
24 Oct 2026
High23 Oct 2026
Quest Diagnostics
Healthcare · Records not stated
American clinical laboratory company Quest Diagnostics disclosed that patient records have been exposed after a threat actor gained unauthorized access to its Quanum LSM system.
23 Oct 2026
Were you affected?