Weekly briefing No. 42 published 30 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,451
Disclosures in the tracker, all years
2,165
Of those, indexed in 2026
115
Added in November
24
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 13 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

76 incidents from 8 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. Taiwan3 Nov 2026Synology NAS device owners (worldwide)The source does not say how they got in.The Hacker News
High1 Dec 2024
Framework
Technology · Records not stated
Data breach exposed all customers' names, email addresses, phone numbers, and physical addresses
1 Dec 2024
High1 Dec 2024
Mizuno
Retail · Records not stated
2024 ransomware attack and data breach affecting customers
1 Dec 2024
High1 Dec 2024
Estée Lauder
Retail · Records not stated
Data breach tied to Oracle EBS vulnerability; exposed HR and operational data from company systems
1 Dec 2024
High1 Dec 2024
Abbott Laboratories
Healthcare · Records not stated
Cyber incident affecting medical device company; investigating data breach affecting patient information
1 Dec 2024
High1 Dec 2024
Suno
Technology · Records not stated
Customer records and AI model training data exposed; notification delays reported
1 Dec 2024
Critical1 Dec 2024
Gaming Accounts (Multiple)
Technology · Records not stated
Over 11 million gaming account credentials exposed in 2024 data leaks
1 Dec 2024
Critical1 Dec 2024
Ernst & Young
Finance · Records not stated
Names, addresses, SSNs, and financial information stolen from third-party platform
1 Dec 2024
High1 Dec 2024
River Financial Corporation
Finance · Records not stated
Ransomware attack; hackers stole data and later confirmed deletion
1 Dec 2024
Critical1 Dec 2024
Canada Life
Finance · 5,500,000 records
Threat actor claims 5.5 million records for sale including customer, employee, and corporate data
1 Dec 2024
High1 Dec 2024
Ecopetrol
Sector not stated · 3,300 records
Cyberattack stole data tied to approximately 3,300 user accounts at Colombian state energy company
1 Dec 2024
Critical1 Dec 2024
Accenture
Technology · Records not stated
Threat actor stole vast trove of sensitive data from consulting giant in cyberattack
1 Dec 2024
Critical1 Dec 2024
Trizetto Provider Solutions
Healthcare · 3,400,000 records
Unauthorized access to IT environment exposed PHI of 3.4 million individuals
1 Dec 2024
High1 Dec 2024
FirstClass (Australian travel agency)
Retail · Records not stated
Customer records allegedly breached; threat actor claims on underground forums
1 Dec 2024
Critical1 Dec 2024
Qantas
Sector not stated · 5,670,000 records
5.67 million customer records exposed via vishing attack including personal and travel information
1 Dec 2024
Critical1 Dec 2024
UnitedHealthcare
Healthcare · Records not stated
2024 cyberattack exposing sensitive health and insurance data from millions of patients
1 Dec 2024
Critical1 Dec 2024
Tribeca Film Festival
Sector not stated · 666,000 records
Unprotected database exposed 666,000 records including celebrity contact data without password or encryption
1 Dec 2024
Critical1 Dec 2024
McLaren Health Care
Healthcare · 3,200,000 records
Two ransomware attacks in 2023 and 2024 affecting 3.2 million patients, settled class-action for $14M
1 Dec 2024
Critical1 Dec 2024
Meta
Technology · Records not stated
2018 data breach; EU privacy regulator fined Meta 251 million euros for violations
1 Dec 2024
High1 Dec 2024
South Florida Injury Centers
Healthcare · 1,525 records
Data breach exposed 1,525 records including SSNs and medical records (PHI/PII)
1 Dec 2024
Critical1 Dec 2024
Revolut
Finance · 75,000,000 records
75 million customer records including credit card data allegedly exposed for sale
1 Dec 2024
High1 Dec 2024
PowerSchool
Education · Records not stated
Cyberattack in Dec 2024 exposed student and staff data from thousands of schools
1 Dec 2024
High29 Nov 2024
Krispy Kreme
Technology · Records not stated
Play ransomware attack disrupted online ordering systems
29 Nov 2024
High28 Nov 2024
Alder Hey Children's Hospital
Healthcare · Records not stated
INC Ransom gang stole patient records from Liverpool children's hospital
28 Nov 2024
High25 Nov 2024
Wirral University Teaching Hospital
Healthcare · Records not stated
Cyberattack forced hospital to declare major incident, systems offline for days
25 Nov 2024
Were you affected?