Weekly briefing No. 42 published 30 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,421
Disclosures in the tracker, all years
2,136
Of those, indexed in 2026
62
Added in November
24
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 9 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

78 incidents from 10 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States6 Nov 2026Family Implant and DentistryThe source does not say how they got in.Vermont Attorney General
  2. United States6 Nov 2026Nephrology AssociatesThe source does not say how they got in.Vermont Attorney General
  3. United States6 Nov 2026IronBridge Wealth Counsel, LLCThe source does not say how they got in.Vermont Attorney General
  4. United States6 Nov 2026Insight Credit UnionThe source does not say how they got in.Vermont Attorney General
  5. United States5 Nov 2026Amplifon (USA), Inc.The source does not say how they got in.Vermont Attorney General
  6. United States5 Nov 2026UFP technologies,The source does not say how they got in.Vermont Attorney General
  7. United States5 Nov 2026Queens Public LibraryThe source does not say how they got in.The Record
  8. United States5 Nov 2026Xplicit Audio LLCThe source does not say how they got in.Vermont Attorney General
  9. United States5 Nov 2026Killingly Public Schools (KPS)The source does not say how they got in.Vermont Attorney General
  10. United States4 Nov 2026DreamHostHow they got in: a known flaw in software the victim ran.BleepingComputer
  11. United States4 Nov 2026Blossom HealthThe source does not say how they got in.HIPAA Journal
  12. United States4 Nov 2026The Town of LincolnThe source does not say how they got in.Vermont Attorney General
Critical1 Jun 2025
Medical Billing Company
Healthcare · 1,300,000 records
2025 ransomware attack exposed protected health data on 1.3 million people, leaked to dark web
1 Jun 2025
Critical1 Jun 2025
Paraguay Government
Government · 7,400,000 records
7.4 million records containing PII of Paraguayan citizens offered for sale by cybercriminals
1 Jun 2025
Critical1 Jun 2025
Aflac
Finance · 1,300,000 records
Data breach exposed 22.65 million individual records in June 2025
1 Jun 2025
Critical1 Jun 2025
Ahold Delhaize
Retail · 2,200,000 records
Cyber-attack on US operations exposed personal data of over 2.2 million customers
1 Jun 2025
Critical27 May 2025
Free
Finance · 13,926,173 records
13,926,173 records exposed, Bank account numbers, Dates of birth, Genders, Names and 2 more
27 May 2025
Medium22 May 2025
Fédération Francaise de Rugby
Government · 281,977 records
281,977 records exposed, Dates of birth, Email addresses, Names, Phone numbers
22 May 2025
Critical8 May 2025
OnRPG
Retail · 1,047,640 records
1,047,640 records exposed, Email addresses, IP addresses, Passwords, Usernames
8 May 2025
High1 May 2025
Magna Hospitality Group
Sector not stated · Records not stated
Told state regulators an unauthorized actor copied files from its systems in May 2025; disclosure came about 17 months later.
1 May 2025
High1 May 2025
LexisNexis
Sector not stated · 364,000 records
Data broker breach exposed personal information of over 364,000 people
1 May 2025
Critical1 May 2025
Kettering Health
Healthcare · 1,700,000 records
Ransomware attack affected 1.7 million individuals, Ohio health system
1 May 2025
Critical1 May 2025
UK Legal Aid Agency
Government · Records not stated
Hackers accessed large amount of information from Ministry of Justice system
1 May 2025
High1 May 2025
Adidas
Retail · Records not stated
Cyberattack exposed customers' personal information and credit card data
1 May 2025
Medium1 May 2025
TehetségKapu
Education · 54,357 records
54,357 records exposed, Email addresses, Names, Usernames
1 May 2025
Medium1 May 2025
Harrods (UK)
Retail · Records not stated
Luxury retailer confirmed cyber incident, restricted internet access as precaution
1 May 2025
High30 Apr 2025
Co-op Group (UK)
Retail · Records not stated
Attempted cyberattack forced Co-op to shut down IT systems, operations disrupted
30 Apr 2025
High22 Apr 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Cyberattack disrupted online ordering and contactless payments across UK stores
22 Apr 2025
High22 Apr 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Cyberattack disrupted online ordering and contactless payments across UK stores
22 Apr 2025
High22 Apr 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Cyberattack disrupted online ordering and contactless payments across UK stores
22 Apr 2025
High22 Apr 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Cyberattack disrupted online ordering and contactless payments across UK stores
22 Apr 2025
High22 Apr 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Cyberattack disrupted online ordering and contactless payments across UK stores
22 Apr 2025
High22 Apr 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Cyberattack disrupted online ordering and contactless payments across UK stores
22 Apr 2025
High22 Apr 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Cyberattack disrupted online ordering and contactless payments across UK stores
22 Apr 2025
High22 Apr 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Cyberattack disrupted online ordering and contactless payments across UK stores
22 Apr 2025
High22 Apr 2025
Organisation not named
Retail · Records not stated
The disclosure as indexed does not name the organisation.
Cyberattack disrupted online ordering and contactless payments across UK stores
22 Apr 2025
Were you affected?