Weekly briefing No. 42 published 30 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,591
Disclosures in the tracker, all years
2,085
Of those, indexed in 2026
4
Added in November
26
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 1 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

77 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States30 Oct 2026The Krum Public LibraryThe source does not say how they got in.Vermont Attorney General
  2. United States30 Oct 2026Marathon HealthThe source does not say how they got in.Vermont Attorney General
  3. United States29 Oct 2026BRANDco., LLCThe source does not say how they got in.Vermont Attorney General
  4. United States29 Oct 2026Revolve Group, Inc.The source does not say how they got in.Vermont Attorney General
  5. United States29 Oct 2026The Research Foundation for Mental Health, Inc.The source does not say how they got in.Vermont Attorney General
  6. United States29 Oct 2026Del Monte Foods Corporation II Inc.The source does not say how they got in.California Attorney General
  7. United States29 Oct 2026Bangkok Bank PCL - New York BranchThe source does not say how they got in.California Attorney General
  8. United States29 Oct 2026IRhythm TechnologiesThe source does not say how they got in.SecurityWeek
  9. United States28 Oct 2026Blueberry PediatricsHow they got in: a known flaw in software the victim ran.HIPAA Journal
  10. United States28 Oct 2026CodeSecure Inc.The source does not say how they got in.Vermont Attorney General
  11. United States28 Oct 202611252227 Canada Inc.The source does not say how they got in.Vermont Attorney General
  12. United States28 Oct 2026Troutman Pepper Locke LLPThe source does not say how they got in.California Attorney General
High7 Aug 2026
Coinbase
Finance · Records not stated
Breach involving outsourcer fired HR employees investigating data theft; suspect retained data for 10,000+ customers
7 Aug 2026
Critical7 Aug 2026
Gaming Accounts (Multi-org)
Technology · Records not stated
11+ million gaming account credentials exposed through credential theft and infostealer malware
7 Aug 2026
High7 Aug 2026
Officer PII and justice partner emails exposed
Government · Records not stated
Officer PII and justice partner emails exposed
7 Aug 2026
Medium7 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft attacks, known to impact Framework and Tally.
7 Aug 2026
Critical7 Aug 2026
Snowflake (165 breaches)
Technology · 165,000,000 records
Canadian hacker pleaded guilty to hacking data storage platform; 165 breaches resulted, 100M+ people affected
7 Aug 2026
High7 Aug 2026
Marquis (fintech firm)
Finance · 672,000 records
Ransomware attack stole names, addresses, card numbers and sensitive data affecting 672,000 records
7 Aug 2026
Critical7 Aug 2026
Snowflake (multiple customers)
Technology · 165,000,000 records
165+ breaches resulted from Snowflake hacking conspiracy affecting 100M+ people
7 Aug 2026
High7 Aug 2026
Yearslong data breach
Healthcare · Records not stated
Yearslong data breach exposed residents' private health-related information
7 Aug 2026
Critical7 Aug 2026
TriZetto (duplicate confirmation)
Healthcare · 3,400,000 records
Confirmed year-long hack of network exposed records on 3.4 million people
7 Aug 2026
Critical7 Aug 2026
Blue Cross Blue Shield
Healthcare · Records not stated
Massive data breach affecting health and insurance information; company delayed reporting to regulators
7 Aug 2026
Critical7 Aug 2026
US Civil Service
Government · Records not stated
Thousands of civil servants' passwords exposed since early 2024, including White House-linked credentials
7 Aug 2026
Critical7 Aug 2026
Cyber attack
Government · 607,000 records
Cyber attack exposed approximately 607,000 records
7 Aug 2026
Critical7 Aug 2026
Snowflake (via hacks)
Technology · 165,000,000 records
165 breaches affecting over 100 million people via compromised Snowflake platform; Canadian hacker Connor Riley Moucka pleaded guilty
7 Aug 2026
High7 Aug 2026
TD Bank
Finance · Records not stated
Data security incident affecting customer information, separate newer breach in 2026
7 Aug 2026
Critical7 Aug 2026
Queensland Schools
Education · Records not stated
Major cyber breach affecting tens of thousands of students and teachers via education technology platform
7 Aug 2026
High7 Aug 2026
FirstClass Travel Agency
Sector not stated · Records not stated
Alleged data breach of customer records by threat actor on underground hacking forums
7 Aug 2026
Critical7 Aug 2026
TriZetto (Healthcare Tech Provider)
Healthcare · Records not stated
More than 3 million Americans impacted by 2024 breach affecting multiple states
7 Aug 2026
High7 Aug 2026
Transport for London
Government · Records not stated
Cyberattack on heart of London transport network; cost £39 million; two hackers sentenced
7 Aug 2026
Medium7 Aug 2026
Liechtenstein Beneficiary Register
Government · Records not stated
31K corporate beneficiary records exposed
7 Aug 2026
Critical7 Aug 2026
Snowflake Inc.
Technology · 165,000,000 records
Massive data breach involving customer data theft and extortion
7 Aug 2026
High7 Aug 2026
Gaming Platforms (multiple)
Technology · Records not stated
Data leaks exposed over 11 million gaming account credentials including login information
7 Aug 2026
High7 Aug 2026
Partnered Health (Australian Clinics)
Healthcare · Records not stated
Cyber-attack exposed medical records including Medicare numbers and pathology results
7 Aug 2026
High7 Aug 2026
U.S. Civil Service
Government · Records not stated
Thousands of civil servants passwords exposed since early 2024, including White House credentials
7 Aug 2026
Critical7 Aug 2026
VITAS Hospice Services
Healthcare · 300,000 records
300K patient records exposed via vendor account
7 Aug 2026
Were you affected?