Weekly briefing No. 42 published 30 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,369
Disclosures in the tracker, all years
2,085
Of those, indexed in 2026
4
Added in November
26
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 1 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

77 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States30 Oct 2026The Krum Public LibraryThe source does not say how they got in.Vermont Attorney General
  2. United States30 Oct 2026Marathon HealthThe source does not say how they got in.Vermont Attorney General
  3. United States29 Oct 2026BRANDco., LLCThe source does not say how they got in.Vermont Attorney General
  4. United States29 Oct 2026Revolve Group, Inc.The source does not say how they got in.Vermont Attorney General
  5. United States29 Oct 2026The Research Foundation for Mental Health, Inc.The source does not say how they got in.Vermont Attorney General
  6. United States29 Oct 2026Del Monte Foods Corporation II Inc.The source does not say how they got in.California Attorney General
  7. United States29 Oct 2026Bangkok Bank PCL - New York BranchThe source does not say how they got in.California Attorney General
  8. United States29 Oct 2026IRhythm TechnologiesThe source does not say how they got in.SecurityWeek
  9. United States28 Oct 2026Blueberry PediatricsHow they got in: a known flaw in software the victim ran.HIPAA Journal
  10. United States28 Oct 2026CodeSecure Inc.The source does not say how they got in.Vermont Attorney General
  11. United States28 Oct 202611252227 Canada Inc.The source does not say how they got in.Vermont Attorney General
  12. United States28 Oct 2026Troutman Pepper Locke LLPThe source does not say how they got in.California Attorney General
Medium24 Sep 2018
Real Estate Mogul
Finance · 307,768 records
307,768 records exposed, Email addresses, Names, Phone numbers, Physical addresses
24 Sep 2018
High13 Sep 2018
Russian America
Retail · 182,717 records
182,717 records exposed, Email addresses, Names, Passwords, Phone numbers
13 Sep 2018
High10 Sep 2018
NapsGear
Retail · 287,071 records
287,071 records exposed, Dates of birth, Email addresses, Genders, Names and 4 more
10 Sep 2018
Medium10 Sep 2018
FreshMenu
Government · 110,355 records
110,355 records exposed, Device information, Email addresses, Names, Phone numbers and 2 more
10 Sep 2018
Critical8 Sep 2018
Warmane
Technology · 1,116,256 records
1,116,256 records exposed, Dates of birth, Email addresses, Passwords, Usernames
8 Sep 2018
Critical6 Sep 2018
British Airways (2018 Magecart)
Sector not stated · Records not stated
380,000 payment card records stolen via Magecart skimmer, ICO fined BA 20M GBP
6 Sep 2018
High31 Aug 2018
Mortal Online
Technology · 606,637 records
606,637 records exposed, Email addresses, Names, Passwords, Physical addresses and 1 more
31 Aug 2018
High30 Aug 2018
SvenskaMagic
Technology · 30,327 records
30,327 records exposed, Email addresses, Passwords, Usernames
30 Aug 2018
Medium27 Aug 2018
Atlas Quantum
Finance · 261,463 records
261,463 records exposed, Account balances, Email addresses, Names, Phone numbers
27 Aug 2018
High24 Aug 2018
SpyFone
Technology · 44,109 records
44,109 records exposed, Audio recordings, Browsing histories, Device information, Email addresses and 7 more
24 Aug 2018
Medium22 Aug 2018
Superdrug (UK)
Retail · 20,000 records
20,000 customer records exposed, names, DOBs, phone numbers listed for sale
22 Aug 2018
High9 Aug 2018
MyFHA
Healthcare · 972,629 records
972,629 records exposed, Credit status information, Email addresses, Income levels, IP addresses and 5 more
9 Aug 2018
High8 Aug 2018
Lanwar
Finance · 45,120 records
45,120 records exposed, Email addresses, Names, Passwords, Physical addresses and 1 more
8 Aug 2018
High6 Aug 2018
Adult-FanFiction.Org
Retail · 186,082 records
186,082 records exposed, Dates of birth, Email addresses, Names, Passwords
6 Aug 2018
Critical31 Jul 2018
Fashion Nexus
Government · 1,279,263 records
1,279,263 records exposed, Browser user agent details, Dates of birth, Email addresses, Genders and 6 more
31 Jul 2018
High28 Jul 2018
League of Legends
Finance · 339,487 records
339,487 records exposed, Email addresses, Passwords, Usernames
28 Jul 2018
Critical25 Jul 2018
Exactis
Finance · 131,577,763 records
131,577,763 records exposed, Credit status information, Dates of birth, Education levels, Email addresses and 16 more
25 Jul 2018
High24 Jul 2018
Funny Games
Technology · 764,357 records
764,357 records exposed, Email addresses, IP addresses, Passwords, Usernames
24 Jul 2018
Critical20 Jul 2018
SingHealth (Singapore)
Healthcare · 1,500,000 records
1.5M patient records stolen including PM Lee's medical data, Singapore's worst breach
20 Jul 2018
Critical4 Jul 2018
Yatra
Retail · 5,033,997 records
5,033,997 records exposed, Dates of birth, Email addresses, Names, Passwords and 3 more
4 Jul 2018
High4 Jul 2018
Light's Hope
Finance · 30,484 records
30,484 records exposed, Dates of birth, Email addresses, Geographic locations, IP addresses and 3 more
4 Jul 2018
Critical1 Jul 2018
Gaadi
Retail · 4,261,179 records
4,261,179 records exposed, Email addresses, Genders, Geographic locations, IP addresses and 4 more
1 Jul 2018
High23 Jun 2018
Ticketmaster UK
Sector not stated · 40,000 records
40,000 customer payment details stolen through Inbenta chatbot compromise
23 Jun 2018
Critical13 Jun 2018
Dixons Carphone (Currys)
Retail · 10,000,000 records
10M customer records and 5.9M payment cards compromised over 9 months
13 Jun 2018
Were you affected?