Weekly briefing No. 42 published 30 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,373
Disclosures in the tracker, all years
2,089
Of those, indexed in 2026
6
Added in November
26
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 2 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

77 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States30 Oct 2026The Krum Public LibraryThe source does not say how they got in.Vermont Attorney General
  2. United States30 Oct 2026Marathon HealthThe source does not say how they got in.Vermont Attorney General
  3. United States29 Oct 2026BRANDco., LLCThe source does not say how they got in.Vermont Attorney General
  4. United States29 Oct 2026Revolve Group, Inc.The source does not say how they got in.Vermont Attorney General
  5. United States29 Oct 2026The Research Foundation for Mental Health, Inc.The source does not say how they got in.Vermont Attorney General
  6. United States29 Oct 2026Del Monte Foods Corporation II Inc.The source does not say how they got in.California Attorney General
  7. United States29 Oct 2026Bangkok Bank PCL - New York BranchThe source does not say how they got in.California Attorney General
  8. United States29 Oct 2026IRhythm TechnologiesThe source does not say how they got in.SecurityWeek
  9. United States28 Oct 2026Blueberry PediatricsHow they got in: a known flaw in software the victim ran.HIPAA Journal
  10. United States28 Oct 2026CodeSecure Inc.The source does not say how they got in.Vermont Attorney General
  11. United States28 Oct 202611252227 Canada Inc.The source does not say how they got in.Vermont Attorney General
  12. United States28 Oct 2026Troutman Pepper Locke LLPThe source does not say how they got in.California Attorney General
High1 Aug 2026
Levi Strauss
Retail · Records not stated
Corporate data stolen through social engineering targeting three employees
1 Aug 2026
Critical1 Aug 2026
Origin Energy
Sector not stated · 2,000,000 records
Hacker claims to have stolen information of 2 million customers
1 Aug 2026
High1 Aug 2026
Bank of Baroda
Finance · Records not stated
Compromised employee email account allowed unauthorized access to certain data
1 Aug 2026
High1 Aug 2026
Police National Legal Database
Government · Records not stated
135,000 contact records stolen and leaked on dark web by ExfilSquad
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
221 million login records exposed; Digital Ministry seeking MFA mandate on key state systems
1 Aug 2026
Critical1 Aug 2026
France DGFiP
Government · 678,000 records
Tax authority breach exposed records of 678,000 people and businesses with tax, business and property information
1 Aug 2026
Medium1 Aug 2026
Trezor
Technology · Records not stated
Third-party fulfillment partner breach exposed shipping addresses of 14,000 hardware wallet buyers
1 Aug 2026
High1 Aug 2026
Uber Freight
Technology · Records not stated
Hacking group claimed data breach at ridesharing giant's logistics division; investigation underway
1 Aug 2026
High1 Aug 2026
Valve (CEVA Logistics partner)
Technology · Records not stated
Steam hardware shipping partner CEVA Logistics breached, exposing European customer names, addresses, order data
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Clop hacking group claimed theft of data from nearly 50 multinational firms via vulnerability exploitation
1 Aug 2026
High1 Aug 2026
Levi Strauss
Retail · Records not stated
Hackers used social engineering to access employee computers and steal corporate data
1 Aug 2026
High1 Aug 2026
Bank of Baroda
Finance · Records not stated
Cyber incident from compromised employee email account allowing unauthorized data access
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records stolen and leaked on dark web by ExfilSquad
1 Aug 2026
Critical1 Aug 2026
Thailand Digital Ministry
Government · Records not stated
221 million login records exposed, MFA mandate sought for state systems
1 Aug 2026
High1 Aug 2026
DGFiP (France)
Government · 678,000 records
678,000 records exposed including tax, business and property information
1 Aug 2026
Medium1 Aug 2026
Trezor
Technology · Records not stated
Third-party fulfillment partner breach exposed shipping addresses of 14,000 hardware wallet buyers in 7 countries
1 Aug 2026
High1 Aug 2026
Uber Freight
Technology · Records not stated
Hacking group claimed responsibility for data breach at Uber Freight logistics division
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Woeful security at criminal records office led to sensitive data leak, unable to confirm if exfiltrated
1 Aug 2026
High1 Aug 2026
Valve (via CEVA Logistics)
Technology · Records not stated
European logistics partner breached; customer names, addresses, and order data exposed for Steam hardware customers
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
Large-scale data theft claimed by hacking group exploiting software vulnerabilities across multiple targets
1 Aug 2026
High1 Aug 2026
Fiserv
Finance · Records not stated
Hacking group claimed mass data theft via software vulnerability exploitation
1 Aug 2026
High1 Aug 2026
GE
Sector not stated · Records not stated
Hacking group claimed mass data theft via software vulnerability exploitation
1 Aug 2026
High1 Aug 2026
Philips
Technology · Records not stated
Hacking group claimed mass data theft via software vulnerability exploitation
1 Aug 2026
High1 Aug 2026
Shell
Sector not stated · Records not stated
Hacking group claimed mass data theft via software vulnerability exploitation
1 Aug 2026
Were you affected?