Weekly briefing No. 42 published 30 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,380
Disclosures in the tracker, all years
2,093
Of those, indexed in 2026
14
Added in November
25
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 4 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

78 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States30 Oct 2026VT Department of LaborThe source does not say how they got in.Vermont Attorney General
  2. United States30 Oct 2026Incredible Technologies,Inc.The source does not say how they got in.Vermont Attorney General
  3. United States30 Oct 2026NCH CorporationThe source does not say how they got in.California Attorney General
  4. United States30 Oct 2026Aesto, LLCThe source does not say how they got in.California Attorney General
  5. United States30 Oct 2026The Nueva SchoolThe source does not say how they got in.California Attorney General
  6. United States30 Oct 2026El Camino HealthThe source does not say how they got in.California Attorney General
  7. United States30 Oct 2026Baanx US Corp.The source does not say how they got in.California Attorney General
  8. United States30 Oct 2026The Krum Public LibraryThe source does not say how they got in.Vermont Attorney General
  9. United States30 Oct 2026Marathon HealthThe source does not say how they got in.Vermont Attorney General
  10. United States29 Oct 2026HCA Healthcare, Inc.The source does not say how they got in.California Attorney General
  11. United States29 Oct 2026Blossom BH Opco Inc.The source does not say how they got in.California Attorney General
  12. United States29 Oct 2026BRANDco., LLCThe source does not say how they got in.Vermont Attorney General
Critical1 Jul 2026
Organisation not named
Technology · 27,000,000 records
The disclosure as indexed does not name the organisation.
Hackers exploited exposed Microsoft Power Pages portals stealing 27 million records from 13 organizations
1 Jul 2026
High1 Jul 2026
Abbott Laboratories
Healthcare · Records not stated
Cyber incident investigated; diagnostics company exposed patient data
1 Jul 2026
Critical1 Jul 2026
Origin Energy
Sector not stated · 2,000,000 records
Data breach affecting 2 million customers of Australian energy giant confirmed
1 Jul 2026
High1 Jul 2026
Department for Education
Government · Records not stated
Data breach claimed by ExfilSquad group, details leaked on dark web
1 Jul 2026
High1 Jul 2026
Fairlife (Coca-Cola)
Retail · Records not stated
Ransomware attack on dairy unit affected production systems; US Fairlife production suspended
1 Jul 2026
High1 Jul 2026
Craneware
Healthcare · Records not stated
Hackers stole customer data from major hospital software vendor in supply-chain attack
1 Jul 2026
High1 Jul 2026
Abbott Laboratories
Healthcare · Records not stated
Cyber incident affecting medical device company with patient data exposure
1 Jul 2026
Critical1 Jul 2026
Origin Energy
Sector not stated · 2,000,000 records
2 million customer records stolen in hack of Australian energy giant
1 Jul 2026
High1 Jul 2026
Hugging Face
Technology · Records not stated
Internal datasets and credentials compromised, users urged to rotate access tokens
1 Jul 2026
High1 Jul 2026
LVM (Latvian Forestry)
Sector not stated · Records not stated
State-owned forestry company LVM affected by ransomware attack; systems still restoring weeks later
1 Jul 2026
High1 Jul 2026
Fairlife (Coca-Cola)
Retail · Records not stated
Ransomware attack on Fairlife dairy unit affected production systems; US production suspended
1 Jul 2026
High1 Jul 2026
Exact Sciences
Healthcare · Records not stated
Alleged data breach reported by hackers; attorney investigation ongoing
1 Jul 2026
High1 Jul 2026
Craneware
Healthcare · Records not stated
Hospital software vendor breach exposed customer data; supply-chain attack on healthcare industry
1 Jul 2026
High1 Jul 2026
Abbott Laboratories
Healthcare · Records not stated
Cyber incident investigated involving medical device company; lawsuit filed by affected patients
1 Jul 2026
High1 Jul 2026
Hugging Face
Technology · Records not stated
Breach affected internal datasets and credentials; users urged to rotate access tokens
1 Jul 2026
High1 Jul 2026
Chick-fil-A
Retail · Records not stated
Customer loyalty accounts accessed using stolen usernames and passwords
1 Jul 2026
High1 Jul 2026
Cure Dental
Healthcare · Records not stated
Current and former patients' PII exposed in data breach
1 Jul 2026
High1 Jul 2026
Abbott Laboratories
Healthcare · Records not stated
Cyber incident affecting diagnostics company involving patient data exposure
1 Jul 2026
Critical1 Jul 2026
Estée Lauder
Retail · Records not stated
Data breach via Oracle E-Business Suite exposure of SSNs, passports, and health records (Clop campaign)
1 Jul 2026
Critical1 Jul 2026
Amgen
Healthcare · Records not stated
Hackers accessed cloud environment, stealing patient health data and proprietary company information
1 Jul 2026
Critical1 Jul 2026
Origin Energy
Sector not stated · 2,000,000 records
Hacker claimed to steal information of 2 million customers from Australian energy giant
1 Jul 2026
High1 Jul 2026
Bank of Baroda
Finance · Records not stated
Employee email account compromised allowing unauthorized access to certain data
1 Jul 2026
High1 Jul 2026
Hugging Face
Technology · Records not stated
Breach affected internal datasets and credentials, users urged to rotate access tokens
1 Jul 2026
Critical1 Jul 2026
Accenture
Technology · Records not stated
Data breach with 35GB of internal data stolen including source code and credentials
1 Jul 2026
Were you affected?