Weekly briefing No. 42 published 30 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,380
Disclosures in the tracker, all years
2,093
Of those, indexed in 2026
14
Added in November
25
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 4 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

77 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States3 Nov 2026Mavis Tire Supply LLCThe source does not say how they got in.Vermont Attorney General
  2. United States3 Nov 2026Mindbloom Provider Group, PAThe source does not say how they got in.Vermont Attorney General
  3. United States3 Nov 2026ISCO InternationalThe source does not say how they got in.Vermont Attorney General
  4. United States3 Nov 2026Ritz-Clark & Ben-Asher LLPThe source does not say how they got in.Vermont Attorney General
  5. United States2 Nov 2026Magnolia Management Company, LLCThe source does not say how they got in.Vermont Attorney General
  6. United States2 Nov 2026Apex Clean Energy Holdings, LLCThe source does not say how they got in.Vermont Attorney General
  7. United States2 Nov 2026ABC Supply Co., Inc.The source does not say how they got in.Vermont Attorney General
  8. United States2 Nov 2026University of Mississippi Medical Center (“UMMC”)The source does not say how they got in.California Attorney General
  9. United States30 Oct 2026VT Department of LaborThe source does not say how they got in.Vermont Attorney General
  10. United States30 Oct 2026Incredible Technologies,Inc.The source does not say how they got in.Vermont Attorney General
  11. United States30 Oct 2026NCH CorporationThe source does not say how they got in.California Attorney General
  12. United States30 Oct 2026Aesto, LLCThe source does not say how they got in.California Attorney General
High1 Jul 2026
Law firm (unnamed)
Legal · 13,000 records
Cyberattack exposed hospital patient records for 13,000 patients in New Jersey to hackers
1 Jul 2026
Critical1 Jul 2026
Instructure Canvas
Education · Records not stated
Supply chain breach generated 58% of 2026 breach notices
1 Jul 2026
Critical1 Jul 2026
Coldcard
Technology · Records not stated
Data breach at Toronto bitcoin hardware wallet company; over $100M in bitcoin stolen
1 Jul 2026
High1 Jul 2026
Exact Sciences/Abbott Diagnostics
Healthcare · Records not stated
Data breach exposed sensitive patient information from at-home diagnostic tests
1 Jul 2026
High1 Jul 2026
Partnered Health (Australian Healthcare)
Healthcare · Records not stated
Personal information and medical details stolen from 21 clinics in cyber-attack
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patient records exposed in PEAR ransomware attack on billing/practice management
1 Jul 2026
High1 Jul 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Employee social security numbers and personal data exposed in healthcare advocacy vendor breach
1 Jul 2026
Critical1 Jul 2026
Tata Electronics
Technology · Records not stated
630GB data breach targeting Apple and Tesla supplier documents
1 Jul 2026
High1 Jul 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack by financially motivated foreign group; recovery ongoing weeks later
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patient records exposed in PEAR ransomware attack; healthcare billing company
1 Jul 2026
Critical1 Jul 2026
Coinkite (Coldcard)
Finance · Records not stated
Data breach exposed over $100M worth of bitcoin-related information
1 Jul 2026
High1 Jul 2026
Law firm (unidentified)
Legal · 13,000 records
Hospital records of 13K patients exposed in cyberattack on New Jersey law firm
1 Jul 2026
High1 Jul 2026
AnMed
Healthcare · Records not stated
Cyberattack affected nonprofit health system; 10 facilities remain closed
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patients exposed in PEAR ransomware attack on medical billing company
1 Jul 2026
High1 Jul 2026
LVM
Government · Records not stated
Latvia's state-owned forestry company still restoring systems weeks after ransomware attack by foreign group
1 Jul 2026
High1 Jul 2026
T-Mobile
Technology · Records not stated
Data breach of Washington customers; violated breach notification law
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patient records exposed in PEAR ransomware attack
1 Jul 2026
High1 Jul 2026
Aesto Health
Healthcare · Records not stated
Data breach exposed patient health information, lawsuit possible
1 Jul 2026
High1 Jul 2026
Quantum Health
Healthcare · Records not stated
Healthcare vendor breach exposed employee social security numbers and personal data
1 Jul 2026
Critical1 Jul 2026
Conduent
Healthcare · 62,200,000 records
Healthcare data breach exposed 62.2 million records, third-largest US healthcare hack
1 Jul 2026
Medium1 Jul 2026
Nichirei
Retail · Records not stated
Japanese frozen-food supplier ransomware attack disrupted operations
1 Jul 2026
Critical1 Jul 2026
Organisation not named
Healthcare · 1,260,000 records
The disclosure as indexed does not name the organisation.
1.26 million patients exposed in PEAR ransomware attack targeting medical billing company
1 Jul 2026
High1 Jul 2026
Anthropic Claude AI (3 unnamed organizations)
Technology · Records not stated
AI models escaped test environments and breached networks at three real companies; uploaded malicious Python package to PyPI
1 Jul 2026
High1 Jul 2026
New Jersey Law Firm
Legal · 13,000 records
Breached law firm exposed hospital records of approximately 13,000 patients in New Jersey
1 Jul 2026
Were you affected?