Weekly briefing No. 42 published 30 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,383
Disclosures in the tracker, all years
2,097
Of those, indexed in 2026
14
Added in November
25
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 4 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

77 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States3 Nov 2026Mavis Tire Supply LLCThe source does not say how they got in.Vermont Attorney General
  2. United States3 Nov 2026Mindbloom Provider Group, PAThe source does not say how they got in.Vermont Attorney General
  3. United States3 Nov 2026ISCO InternationalThe source does not say how they got in.Vermont Attorney General
  4. United States3 Nov 2026Ritz-Clark & Ben-Asher LLPThe source does not say how they got in.Vermont Attorney General
  5. United States2 Nov 2026Magnolia Management Company, LLCThe source does not say how they got in.Vermont Attorney General
  6. United States2 Nov 2026Apex Clean Energy Holdings, LLCThe source does not say how they got in.Vermont Attorney General
  7. United States2 Nov 2026ABC Supply Co., Inc.The source does not say how they got in.Vermont Attorney General
  8. United States2 Nov 2026University of Mississippi Medical Center (“UMMC”)The source does not say how they got in.California Attorney General
  9. United States30 Oct 2026VT Department of LaborThe source does not say how they got in.Vermont Attorney General
  10. United States30 Oct 2026Incredible Technologies,Inc.The source does not say how they got in.Vermont Attorney General
  11. United States30 Oct 2026NCH CorporationThe source does not say how they got in.California Attorney General
  12. United States30 Oct 2026Aesto, LLCThe source does not say how they got in.California Attorney General
High1 Jul 2026
Hospital software vendor
Healthcare · Records not stated
Customer data breach from major healthcare software vendor via supply-chain attack
1 Jul 2026
Critical1 Jul 2026
Fortinet
Technology · Records not stated
FortiBleed campaign; 73,000+ devices affected; verified administrator credentials and VPN data exposed
1 Jul 2026
High1 Jul 2026
Evanston Township High School
Education · Records not stated
Cyberattack disrupted phone systems; students and parents advised to use email
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patients exposed in PEAR ransomware attack on billing system
1 Jul 2026
High1 Jul 2026
Police National Legal Database
Government · Records not stated
135,000 contact records stolen and leaked on dark web by ExfilSquad hacker group
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patients exposed in PEAR ransomware attack on medical billing systems
1 Jul 2026
High1 Jul 2026
KT (South Korea)
Technology · Records not stated
Personal data breach via illegal base stations causing unauthorized micropayment damages
1 Jul 2026
High1 Jul 2026
Valve
Technology · Records not stated
Steam hardware customer data stolen, affecting European customers
1 Jul 2026
Critical1 Jul 2026
Estée Lauder
Retail · Records not stated
Oracle E-Business Suite breach exposed SSNs, passports, health records via Clop campaign
1 Jul 2026
High1 Jul 2026
Healthcare advocacy vendor cybersecurity incident
Healthcare · Records not stated
Healthcare advocacy vendor cybersecurity incident exposed employee Social Security numbers
1 Jul 2026
High1 Jul 2026
Levi Strauss
Retail · Records not stated
Corporate data stolen via social engineering attack on 3 employee computers
1 Jul 2026
High1 Jul 2026
Cure Dental
Healthcare · Records not stated
Data breach exposed personally identifiable information of current and former patients
1 Jul 2026
High1 Jul 2026
Allstate
Finance · Records not stated
Data breach exposed employee-related records, part of pattern targeting insurers
1 Jul 2026
High1 Jul 2026
KT
Technology · Records not stated
South Korean telecom breach via illegal base stations, personal data and unauthorized micropayment damages
1 Jul 2026
High1 Jul 2026
Huntsville Hospital Health System
Healthcare · Records not stated
Third-party data breach compromised patient data
1 Jul 2026
Critical1 Jul 2026
Instructure
Education · Records not stated
Canvas platform supply chain breach generating 58% of all breach notices in 2026
1 Jul 2026
Critical1 Jul 2026
Coca-Cola Dairy Operations
Retail · Records not stated
Ransomware attack shut down dairy brand operations; data compromised
1 Jul 2026
High1 Jul 2026
fairlife (Coca-Cola)
Retail · Records not stated
Ransomware attack shut down dairy operations
1 Jul 2026
High1 Jul 2026
Cyberattack on law firm
Legal · 13,000 records
Cyberattack on law firm exposed hospital records for nearly 13,000 patients in New Jersey
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patients exposed in PEAR ransomware attack on medical billing system
1 Jul 2026
Critical1 Jul 2026
Coca-Cola (fairlife)
Retail · Records not stated
Ransomware attack shut down dairy operations
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
Healthcare billing company; 1.26 million patient records exposed in PEAR ransomware attack
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patient records exposed in PEAR ransomware attack on healthcare billing company
1 Jul 2026
High1 Jul 2026
River Bank & Trust
Finance · Records not stated
Data stolen in ransomware attack; hackers confirmed data deletion
1 Jul 2026
Were you affected?