Weekly briefing No. 42 published 30 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,406
Disclosures in the tracker, all years
2,120
Of those, indexed in 2026
45
Added in November
46
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 6 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

77 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States5 Nov 2026Xplicit Audio LLCThe source does not say how they got in.Vermont Attorney General
  2. United States5 Nov 2026Killingly Public Schools (KPS)The source does not say how they got in.Vermont Attorney General
  3. United States4 Nov 2026DreamHostHow they got in: a known flaw in software the victim ran.BleepingComputer
  4. United States4 Nov 2026The Town of LincolnThe source does not say how they got in.Vermont Attorney General
  5. United States4 Nov 2026Vanguard Group, Inc.The source does not say how they got in.Vermont Attorney General
  6. United States4 Nov 2026Byker & Associates, Inc.The source does not say how they got in.Vermont Attorney General
  7. United States4 Nov 2026RevSpring, Inc.The source does not say how they got in.California Attorney General
  8. United States4 Nov 2026Hoag Memorial Hospital PresbyterianThe source does not say how they got in.California Attorney General
  9. United States4 Nov 2026New Century Ophthamology P.C.The source does not say how they got in.Vermont Attorney General
  10. United States4 Nov 2026Alation Inc.The source does not say how they got in.Vermont Attorney General
  11. United States3 Nov 2026WorkOSThe source does not say how they got in.BleepingComputer (via SecOpsNews feed)
  12. United States3 Nov 2026Cognitive Health Technologies (New York)The source does not say how they got in.HIPAA Journal
High1 May 2026
UC Berkeley
Education · 600,000 records
ShinyHunters stole 600K records from Canvas learning management platform
1 May 2026
High1 May 2026
Atrium Health Navicent
Healthcare · Records not stated
Patient records system breach exposing patient records and personal information
1 May 2026
Critical1 May 2026
NYC Health + Hospitals
Healthcare · 1,800,000 records
Hackers stole medical data, fingerprints, and biometric scans affecting 1.8 million people
1 May 2026
Critical1 May 2026
Foxconn
Technology · Records not stated
Ransomware group claimed to have stolen 8 terabytes of data from electronics manufacturing giant
1 May 2026
Critical1 May 2026
Canvas (Instructure)
Education · 275,000,000 records
Educational platform breached by ShinyHunters, 275 million records compromised, hackers threatened to leak data
1 May 2026
High1 May 2026
Instructure (Canvas)
Education · Records not stated
Ransomware attack, owner reached agreement with threat actors after data breach
1 May 2026
Critical1 May 2026
African National Congress (ANC)
Government · Records not stated
2 million private member records exposed and offered for sale by hacker group
1 May 2026
Medium1 May 2026
Aman
Retail · 215,563 records
215,563 records exposed, Dates of birth, Email addresses, Genders, Language preferences and 6 more
1 May 2026
High27 Apr 2026
Pitney Bowes
Technology · 8,243,989 records
8,243,989 records exposed, Email addresses, Job titles, Names, Phone numbers and 1 more
27 Apr 2026
High27 Apr 2026
ADT
Government · 30,000 records
5,488,888 records exposed, Dates of birth, Email addresses, Names, Partial government issued IDs and 2 more
27 Apr 2026
High26 Apr 2026
Udemy
Finance · 1,401,259 records
1,401,259 records exposed, Email addresses, Employers, Job titles, Names and 3 more
26 Apr 2026
High24 Apr 2026
Carnival
Technology · 7,531,359 records
7,531,359 records exposed, Dates of birth, Email addresses, Genders, Geographic locations and 3 more
24 Apr 2026
High17 Apr 2026
Amtrak
Retail · 2,147,679 records
2,147,679 records exposed, Email addresses, Names, Physical addresses, Support tickets
17 Apr 2026
Critical16 Apr 2026
McGraw Hill
Education · 13,500,136 records
13,500,136 records exposed, Email addresses, Names, Phone numbers, Physical addresses
16 Apr 2026
High12 Apr 2026
Hallmark
Retail · 1,736,520 records
1,736,520 records exposed, Email addresses, Names, Phone numbers, Physical addresses and 1 more
12 Apr 2026
Medium8 Apr 2026
My Lovely AI
Technology · 106,271 records
106,271 records exposed, Email addresses, Social media profiles
8 Apr 2026
High4 Apr 2026
SongTrivia2
Technology · 291,739 records
291,739 records exposed, Auth tokens, Avatars, Email addresses, Names and 2 more
4 Apr 2026
High4 Apr 2026
Crunchyroll
Retail · 1,195,684 records
1,195,684 records exposed, Email addresses
4 Apr 2026
Medium1 Apr 2026
Signature Healthcare (Brockton Hospital)
Healthcare · Records not stated
Cyberattack led to downtime procedures for two weeks at Brockton Hospital in Massachusetts.
1 Apr 2026
High1 Apr 2026
Signature Healthcare (Brockton Hospital)
Healthcare · Records not stated
Cyberattack led to downtime procedures at Brockton Hospital in Massachusetts for an extended period.
1 Apr 2026
High1 Apr 2026
Nissan
Sector not stated · Records not stated
Data breach involving third-party vendor holding customer information
1 Apr 2026
High1 Apr 2026
Heart South Cardiovascular Group
Healthcare · 46,666 records
46,666 patients affected, personal and health information exposed
1 Apr 2026
Critical1 Apr 2026
ANTS (France)
Government · 19,000,000 records
19 million records exposed from French national ID agency, personal data breach
1 Apr 2026
High1 Apr 2026
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
April 2026 data breach led to eight class-action lawsuits over exposed customer payment and personal data
1 Apr 2026
Were you affected?