This category is for the improper handling of customer or employee data can lead to breaches, exposing sensitive information and violating privacy laws.
TL;DR Compex Legal Services, a Torrance, California company that pulls medical records for law firms, let an unauthorized hacker access the Social Security numbers, medical records, dates of birth, and credit card data of roughly 57,000 people in April 2024.…
TL;DR Brooklinen, Inc. was hit with a federal class action on June 18, 2026 in the Eastern District of New York, accused of secretly tracking users who explicitly told the site not to. The complaint alleges the Brooklinen website loads…
TL;DR On June 11, 2026, cybercriminals reportedly stole the private data of over 2.4 billion TikTok users worldwide, an amount the complaint says impacts “nearly all TikTok users.” The stolen records included names, usernames, email addresses, phone numbers, dates of…
TL;DR Cannabis retailer STIIIZY, Inc. suffered a data breach around October 2024, disclosed on January 7, 2025, exposing the private information of 387,555 people, including 232,578 California residents. The stolen data included personally identifiable information and private health information from…
TL;DR A pathology lab in North Carolina, Marlboro-Chesterfield Pathology, P.C., let a third party break into its systems and grab patients’ names, dates of birth, Social Security numbers, medical treatment information, and health insurance details. The breach was discovered on…
TL;DR On or about September 17, 2024, cybercriminals broke into the network of Physicians Primary Care of Southwest Florida and stole the private information of tens of thousands of patients, including names, Social Security numbers, and protected health information. The…
TL;DR An Iowa trucking company called Schuster Company let hackers into its network for roughly a week in January 2024, exposing names, Social Security numbers, dates of birth, and driver’s license numbers of current and former employees and clients. The…
TL;DR A California class action filed June 24, 2026 accuses Apple of selling Safari as a privacy fortress while the browser leaks identifying data to third-party trackers who use “fingerprinting” to follow users across the web. Apple’s headline promise. that…
TL;DR Atrium Health, a public hospital authority in Charlotte, North Carolina, ran third-party tracking pixels from Meta and Google on its website and patient portal, allegedly leaking patient health-related information to those tech companies. The alleged tracking on the patient…
TL;DR Hackers used compromised credentials to break into 700Credit’s web application 700Dealer.com on October 25, 2025, exposing the private information of roughly 5.8 million people whose data car dealerships had handed over. The stolen data included names, addresses, dates of…