Weekly briefing No. 42 published 30 Oct 2026
Intelligence · Disclosure tracker

Every public disclosure, dated and sourced.

Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.

5,376
Disclosures in the tracker, all years
2,090
Of those, indexed in 2026
7
Added in November
27
Added in the last 7 days
7
Sectors covered

Source: LeakTrace disclosure tracker, 2 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.

Worldwide · How they got in

Incidents worldwide, by country.

77 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

  1. United States30 Oct 2026The Krum Public LibraryThe source does not say how they got in.Vermont Attorney General
  2. United States30 Oct 2026Marathon HealthThe source does not say how they got in.Vermont Attorney General
  3. United States29 Oct 2026BRANDco., LLCThe source does not say how they got in.Vermont Attorney General
  4. United States29 Oct 2026Revolve Group, Inc.The source does not say how they got in.Vermont Attorney General
  5. United States29 Oct 2026The Research Foundation for Mental Health, Inc.The source does not say how they got in.Vermont Attorney General
  6. United States29 Oct 2026Del Monte Foods Corporation II Inc.The source does not say how they got in.California Attorney General
  7. United States29 Oct 2026Bangkok Bank PCL - New York BranchThe source does not say how they got in.California Attorney General
  8. United States29 Oct 2026IRhythm TechnologiesThe source does not say how they got in.SecurityWeek
  9. United States28 Oct 2026Blueberry PediatricsHow they got in: a known flaw in software the victim ran.HIPAA Journal
  10. United States28 Oct 2026CodeSecure Inc.The source does not say how they got in.Vermont Attorney General
  11. United States28 Oct 202611252227 Canada Inc.The source does not say how they got in.Vermont Attorney General
  12. United States28 Oct 2026Troutman Pepper Locke LLPThe source does not say how they got in.California Attorney General
Critical1 Aug 2026
Unlimited Technology Systems
Healthcare · 3,800,000 records
Hackers stole personal, medical, and health insurance information of 3.8 million people
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised; Microsoft SharePoint vulnerabilities suspected on on-premises servers
1 Aug 2026
Medium1 Aug 2026
Five Hong Kong Firms
Sector not stated · Records not stated
Orova ransomware breached five Hong Kong organizations in debut campaign
1 Aug 2026
High1 Aug 2026
bol.com
Retail · Records not stated
Third-party warehousing logistics partner hacked, affecting online retailer operations
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised via SharePoint vulnerabilities in Microsoft servers
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records of police and government officials leaked on dark web by ExfilSquad
1 Aug 2026
High1 Aug 2026
Organisation not named
Finance · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack resulted in data theft; hackers confirmed deletion of stolen data.
1 Aug 2026
High1 Aug 2026
Craneware
Healthcare · Records not stated
Healthcare software vendor suffered breach exposing customer data in supply-chain attack affecting healthcare industry.
1 Aug 2026
High1 Aug 2026
200 accounts compromised; on-premises Microsoft servers affected
Government · Records not stated
200 accounts compromised; on-premises Microsoft servers affected
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records including police and government contact details leaked on dark web by ExfilSquad
1 Aug 2026
High1 Aug 2026
Multiple Hong Kong Firms
Sector not stated · Records not stated
Five Hong Kong organizations breached by Orova ransomware in debut campaign spanning 24 victims
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
Hackers exploited SharePoint vulnerabilities to breach Microsoft servers, compromising 200 accounts
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised after anomalies detected in on-premises Microsoft servers
1 Aug 2026
High1 Aug 2026
Framework
Technology · Records not stated
Hackers accessed names, email addresses, phone numbers, and physical addresses of all customers
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135K contact records and police/government contact details leaked on dark web by ExfilSquad
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised; anomalies detected in on-premises Microsoft servers, SharePoint vulnerabilities suspected
1 Aug 2026
Critical1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records stolen; police, government and customer contact details leaked on dark web
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records leaked on dark web; police and government contact details exposed
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
200 accounts compromised in on-premises Microsoft servers, suspected SharePoint vulnerabilities
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records stolen and leaked on dark web by ExfilSquad
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records stolen; police and government data leaked on dark web
1 Aug 2026
High1 Aug 2026
Orova ransomware
Sector not stated · Records not stated
Orova ransomware targeted five Hong Kong organizations in debut campaign across 24 victims in six countries
1 Aug 2026
High1 Aug 2026
Organisation not named
Government · Records not stated
The disclosure as indexed does not name the organisation.
135,000 contact records stolen; police, government and customer data leaked on dark web
1 Aug 2026
High1 Aug 2026
Nichirei
Sector not stated · Records not stated
Ransomware attack disrupted operations at Japan-based frozen-food supplier and logistics firm
1 Aug 2026
Were you affected?