Daily detections over the last 30 days, one line per provider. The overall count in the live feed says what was just found; this says who's leaking more than usual.