Weekly briefing No. 42 published 30 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,383
Disclosures in the tracker, all years
2,097
Of those, indexed in 2026
14
Added in November
25
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 4 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

77 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States3 Nov 2026Mavis Tire Supply LLCThe source does not say how they got in.Vermont Attorney General
  2. United States3 Nov 2026Mindbloom Provider Group, PAThe source does not say how they got in.Vermont Attorney General
  3. United States3 Nov 2026ISCO InternationalThe source does not say how they got in.Vermont Attorney General
  4. United States3 Nov 2026Ritz-Clark & Ben-Asher LLPThe source does not say how they got in.Vermont Attorney General
  5. United States2 Nov 2026Magnolia Management Company, LLCThe source does not say how they got in.Vermont Attorney General
  6. United States2 Nov 2026Apex Clean Energy Holdings, LLCThe source does not say how they got in.Vermont Attorney General
  7. United States2 Nov 2026ABC Supply Co., Inc.The source does not say how they got in.Vermont Attorney General
  8. United States2 Nov 2026University of Mississippi Medical Center (“UMMC”)The source does not say how they got in.California Attorney General
  9. United States30 Oct 2026VT Department of LaborThe source does not say how they got in.Vermont Attorney General
  10. United States30 Oct 2026Incredible Technologies,Inc.The source does not say how they got in.Vermont Attorney General
  11. United States30 Oct 2026NCH CorporationThe source does not say how they got in.California Attorney General
  12. United States30 Oct 2026Aesto, LLCThe source does not say how they got in.California Attorney General
Critical1 Jul 2026
Network intrusion
Government · Records not stated
Network intrusion confirmed on Homeland Security Information Network
1 Jul 2026
High1 Jul 2026
LastPass
Technology · Records not stated
Data breach at third-party vendor exposed customer data; latest breach confirmed
1 Jul 2026
High1 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Network intrusion on Homeland Security Information Network; initially ruled false positive twice
1 Jul 2026
Critical1 Jul 2026
Partnered Clinics (Australia)
Healthcare · Records not stated
Cyber-attack exposed Medicare numbers, treatment details, pathology results of patients
1 Jul 2026
High1 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Network intrusion on Homeland Security Information Network supporting World Cup games
1 Jul 2026
High1 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Network intrusion and data breach confirmed after initially ruled false positives
1 Jul 2026
Critical1 Jul 2026
MCBS Medical
Healthcare · 1,260,000 records
Medical billing company; 1.26 million patients exposed in PEAR ransomware attack affecting healthcare billing data
1 Jul 2026
High1 Jul 2026
Department for Education
Education · Records not stated
Data breach claimed by ExfilSquad group in ransomware attack
1 Jul 2026
Critical1 Jul 2026
Fortinet (FortiBleed campaign)
Technology · Records not stated
73,000+ FortiGate firewalls and VPN gateways exposed with valid admin and VPN credentials
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patients exposed in PEAR ransomware attack on healthcare billing company
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
Healthcare billing company ransomware attack exposed 1.26 million patient records in PEAR ransomware attack.
1 Jul 2026
High1 Jul 2026
KT (Korean Telecommunications)
Technology · Records not stated
Personal data breach and unauthorized micropayment damages via illegal base stations
1 Jul 2026
High1 Jul 2026
Department for Homeland Security
Government · Records not stated
Network intrusion on Homeland Security Information Network confirmed after false positives
1 Jul 2026
Critical1 Jul 2026
PEAR ransomware attack on medical billing company
Healthcare · 1,260,000 records
PEAR ransomware attack on medical billing company exposed 1.26 million patient records
1 Jul 2026
High1 Jul 2026
Network intrusion on Homeland Security Information Network
Government · Records not stated
Network intrusion on Homeland Security Information Network confirmed after false positives
1 Jul 2026
High1 Jul 2026
Cerner (Huntsville Hospital)
Healthcare · Records not stated
Patient data compromised through third-party vendor breach at Huntsville Hospital Health System
1 Jul 2026
Critical1 Jul 2026
Healthcare billing company
Healthcare · 1,260,000 records
Healthcare billing company exposed 1.26 million patient records in PEAR ransomware attack
1 Jul 2026
High1 Jul 2026
Department of Homeland Security
Government · Records not stated
Network intrusion confirmed on HSIN used for World Cup operations
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patient records exposed in PEAR ransomware attack on billing company
1 Jul 2026
Critical1 Jul 2026
Puerto Rico Government Agency
Government · Records not stated
Cybersecurity loophole in government mapping service exposed 1 million social security numbers
1 Jul 2026
High1 Jul 2026
KT Corporation
Technology · Records not stated
Personal data breach via illegal base stations caused unauthorized micropayments
1 Jul 2026
High1 Jul 2026
Coca-Cola (Fairlife subsidiary)
Sector not stated · Records not stated
Ransomware attack resulted in theft of company data from dairy subsidiary
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patients exposed in PEAR ransomware attack on healthcare billing and practice-management company
1 Jul 2026
Critical1 Jul 2026
MCBS Medical Billing
Healthcare · 1,260,000 records
1.26 million patients exposed in PEAR ransomware attack on billing and practice-management systems
1 Jul 2026
Were you affected?