Weekly briefing No. 42 published 30 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,383
Disclosures in the tracker, all years
2,096
Of those, indexed in 2026
17
Added in November
28
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 4 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

77 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States3 Nov 2026Mavis Tire Supply LLCThe source does not say how they got in.Vermont Attorney General
  2. United States3 Nov 2026Mindbloom Provider Group, PAThe source does not say how they got in.Vermont Attorney General
  3. United States3 Nov 2026ISCO InternationalThe source does not say how they got in.Vermont Attorney General
  4. United States3 Nov 2026Ritz-Clark & Ben-Asher LLPThe source does not say how they got in.Vermont Attorney General
  5. United States2 Nov 2026Magnolia Management Company, LLCThe source does not say how they got in.Vermont Attorney General
  6. United States2 Nov 2026Apex Clean Energy Holdings, LLCThe source does not say how they got in.Vermont Attorney General
  7. United States2 Nov 2026ABC Supply Co., Inc.The source does not say how they got in.Vermont Attorney General
  8. United States2 Nov 2026University of Mississippi Medical Center (“UMMC”)The source does not say how they got in.California Attorney General
  9. United States30 Oct 2026VT Department of LaborThe source does not say how they got in.Vermont Attorney General
  10. United States30 Oct 2026Incredible Technologies,Inc.The source does not say how they got in.Vermont Attorney General
  11. United States30 Oct 2026NCH CorporationThe source does not say how they got in.California Attorney General
  12. United States30 Oct 2026Aesto, LLCThe source does not say how they got in.California Attorney General
Critical1 Jun 2026
Novo Nordisk
Healthcare · Records not stated
Cyber extortion group claimed theft of over 1 terabyte of data with $25 million extortion attempt
1 Jun 2026
Critical1 Jun 2026
Charter Communications
Technology · 42,000,000 records
Data breach exposed 42 million customer records after ShinyHunters extortion threat
1 Jun 2026
High1 Jun 2026
LastPass
Technology · Records not stated
Data breach confirmed affecting customer data through third-party vendor compromise
1 Jun 2026
Critical1 Jun 2026
Odido
Sector not stated · 6,500,000 records
ShinyHunters stole 6.5M customer records and demanded €1M ransom
1 Jun 2026
High1 Jun 2026
FirstClass
Retail · Records not stated
Travel agency customer records allegedly breached and leaked on underground hacking forums
1 Jun 2026
High1 Jun 2026
Veradigm
Healthcare · Records not stated
Electronic health records company disclosed customer data stolen after hackers infiltrated vendor's systems
1 Jun 2026
High1 Jun 2026
Essex NHS Trust
Healthcare · 900,000 records
Thousands of patient records stolen in cyber attack, disclosed more than six months after notification
1 Jun 2026
Critical1 Jun 2026
Elasticsearch database (unnamed organization)
Technology · Records not stated
Publicly exposed database leaked 24 billion stolen credentials, one of largest infostealer compilations
1 Jun 2026
High1 Jun 2026
Partnered Health
Healthcare · Records not stated
Australian GP network breach exposed patient records reaching dark web
1 Jun 2026
High1 Jun 2026
Huntsville Hospital Health System
Healthcare · Records not stated
Third-party data breach exposed patient information across hospital facilities
1 Jun 2026
Critical1 Jun 2026
Fortinet
Technology · Records not stated
FortiBleed breach exposed credentials for 73,932 FortiGate systems including admin and VPN credentials
1 Jun 2026
High1 Jun 2026
FirstClass
Retail · Records not stated
Australian travel agency customer records allegedly breached by threat actor on underground forums
1 Jun 2026
Critical1 Jun 2026
Medical billing company
Healthcare · 1,300,000 records
2025 ransomware attack exposed sensitive health data on 1.3 million people leaked to dark web
1 Jun 2026
High1 Jun 2026
Partnered Health
Healthcare · Records not stated
Patient records exposed in breach at Australian primary healthcare provider network
1 Jun 2026
Critical1 Jun 2026
Fortinet
Technology · Records not stated
FortiBleed campaign exposed verified administrator credentials and VPN access for over 73,000 FortiGate firewall devices globally
1 Jun 2026
Critical1 Jun 2026
Odido
Sector not stated · 6,500,000 records
ShinyHunters stole 6.5M customer records, €1M ransom demanded
1 Jun 2026
Critical1 Jun 2026
Aflac Japan
Finance · 1,300,000 records
4.38 million customer records stolen by hackers containing personal data
1 Jun 2026
High1 Jun 2026
Lands' End
Retail · Records not stated
Customer data breach settled for $5,000 per affected individual
1 Jun 2026
High1 Jun 2026
Huntsville Hospital Health System
Healthcare · Records not stated
Patient data compromised in third-party vendor breach, affecting multiple hospital facilities
1 Jun 2026
High1 Jun 2026
Bedfordshire Hospital
Healthcare · Records not stated
Patient names, NHS numbers and test results exposed in cyber attack affecting hospital patients
1 Jun 2026
High1 Jun 2026
Essex NHS Trust
Healthcare · 900,000 records
Thousands of patient records stolen in cyber attack, disclosed over six months after notification
1 Jun 2026
High1 Jun 2026
Veradigm
Healthcare · Records not stated
Electronic health records company confirms customer data stolen after hackers infiltrated vendor systems
1 Jun 2026
Critical1 Jun 2026
MCBS
Healthcare · 1,200,000 records
Medical business management company breach affected 1.2 million individuals
1 Jun 2026
Critical1 Jun 2026
Medical Billing Company
Healthcare · 1,300,000 records
Ransomware attack exposed sensitive protected health data on 1.3 million people
1 Jun 2026
Were you affected?