Weekly briefing No. 42 published 30 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,409
Disclosures in the tracker, all years
2,124
Of those, indexed in 2026
46
Added in November
46
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 7 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

78 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States6 Nov 2026Family Implant and DentistryThe source does not say how they got in.Vermont Attorney General
  2. United States6 Nov 2026Nephrology AssociatesThe source does not say how they got in.Vermont Attorney General
  3. United States6 Nov 2026IronBridge Wealth Counsel, LLCThe source does not say how they got in.Vermont Attorney General
  4. United States6 Nov 2026Insight Credit UnionThe source does not say how they got in.Vermont Attorney General
  5. United States5 Nov 2026Amplifon (USA), Inc.The source does not say how they got in.Vermont Attorney General
  6. United States5 Nov 2026UFP technologies,The source does not say how they got in.Vermont Attorney General
  7. United States5 Nov 2026Queens Public LibraryThe source does not say how they got in.The Record
  8. United States5 Nov 2026Xplicit Audio LLCThe source does not say how they got in.Vermont Attorney General
  9. United States5 Nov 2026Killingly Public Schools (KPS)The source does not say how they got in.Vermont Attorney General
  10. United States4 Nov 2026DreamHostHow they got in: a known flaw in software the victim ran.BleepingComputer
  11. United States4 Nov 2026The Town of LincolnThe source does not say how they got in.Vermont Attorney General
  12. United States4 Nov 2026Vanguard Group, Inc.The source does not say how they got in.Vermont Attorney General
Critical1 Feb 2026
Credential database (massive leak)
Sector not stated · Records not stated
149 million stolen passwords exposed publicly, including 48 million Gmail accounts
1 Feb 2026
Critical1 Feb 2026
Massive Credential Compilation
Technology · 149,000,000 records
149 million passwords exposed including 48 million Gmail accounts publicly exposed
1 Feb 2026
Critical1 Feb 2026
Credential database (unnamed)
Sector not stated · 149,000,000 records
149 million passwords exposed in massive credential leak, including 48 million Gmail accounts
1 Feb 2026
Critical1 Feb 2026
Credential Database (Unknown Source)
Technology · Records not stated
149 million stolen passwords publicly exposed, including 48 million Gmail accounts
1 Feb 2026
Critical1 Feb 2026
Organisation not named
Technology · 149,000,000 records
The disclosure as indexed does not name the organisation.
149 million passwords exposed including 48 million Gmail accounts
1 Feb 2026
Critical1 Feb 2026
Unknown (Compiled Credential Database)
Technology · 149,000,000 records
149 million passwords exposed including 48 million Gmail accounts
1 Feb 2026
Critical1 Feb 2026
Credential Database Compilation
Technology · 149,000,000 records
149 million passwords and 48 million Gmail accounts exposed
1 Feb 2026
Critical1 Feb 2026
Multiple organizations (Credential compilation)
Technology · Records not stated
149 million stolen passwords exposed publicly, including 48 million Gmail accounts
1 Feb 2026
Critical1 Feb 2026
Multiple (Credential compilation)
Technology · 149,000,000 records
149 million passwords exposed in massive credential leak including 48 million Gmail accounts
1 Feb 2026
Critical1 Feb 2026
McLaren Health Care
Healthcare · Records not stated
Two ransomware breaches in 2023-2024 affecting 3.2M victims
1 Feb 2026
Critical1 Feb 2026
Mass Credential Database
Sector not stated · Records not stated
149 million stolen passwords exposed publicly online including 48 million Gmail accounts
1 Feb 2026
High1 Feb 2026
Conduent (Anthem)
Healthcare · Records not stated
Data breach impacted some Anthem health insurance members; contained with no evidence of misuse
1 Feb 2026
Critical1 Feb 2026
Multiple Sources (Credential Aggregation)
Technology · Records not stated
149 million stolen passwords and 48 million Gmail credentials exposed in massive database leak
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack disrupted patient records access and clinic operations
1 Feb 2026
High1 Feb 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack disrupted patient records access and clinic operations for over a week
1 Feb 2026
High1 Feb 2026
Ransomware attack and data
Healthcare · Records not stated
Ransomware attack and data leak exposed Multiethnic Cohort Study data including driver's license numbers and voter registration
1 Feb 2026
Critical1 Feb 2026
Various (Credential Compilation)
Technology · Records not stated
149 million stolen passwords found publicly exposed online including 48 million Gmail accounts
1 Feb 2026
Critical1 Feb 2026
Multiple Organizations
Technology · 149,000,000 records
149 million passwords exposed in credential database leak including 48 million Gmail accounts
1 Feb 2026
Critical1 Feb 2026
TriZetto
Healthcare · Records not stated
Healthcare tech provider breach affecting over 3 million Americans from 2024 incident
1 Feb 2026
High1 Feb 2026
Conduent/Anthem
Healthcare · Records not stated
Data breach impacts some Anthem members; breach contained with no evidence of misuse
1 Feb 2026
High1 Feb 2026
New Jersey Law Firm
Legal · 13,000 records
Cyberattack exposed hospital records of nearly 13,000 patients through breached law firm representing hospitals
1 Feb 2026
High1 Feb 2026
Anthem/Conduent
Healthcare · Records not stated
Data breach impacted some Anthem members; Conduent reported breach contained with no evidence of misuse
1 Feb 2026
Critical1 Feb 2026
Exposed database (unnamed)
Sector not stated · 3,000,000,000 records
Misconfigured cloud database exposed 3 billion records including SSNs and plaintext passwords
1 Feb 2026
Critical1 Feb 2026
Multiple (Credential Database)
Technology · 149,000,000 records
149 million passwords exposed including 48 million Gmail accounts in publicly exposed database
1 Feb 2026
Were you affected?