This category is for the improper handling of customer or employee data can lead to breaches, exposing sensitive information and violating privacy laws.
TLDR: General Motors transformed the American pastime of driving into a relentless surveillance operation that harvested the private movements of millions of people. They tracked vehicles with extreme precision, recording locations every three seconds down to a few inches. This…
Under Armour prioritized its $5.2 billion annual revenue while failing to implement basic security measures for its customers’ sensitive personal information. In November 2025, a ransomware group successfully seized 343 gigabytes of internal company and customer data, including names, email…
Princeton University, an Ivy League institution with an endowment of tens of billions of dollars, allegedly prioritized the collection of “indispensable” donor revenue over the basic digital safety of its community. By maintaining a massive, unencrypted “gold mine” of personal…
TLDR: Kaiser Foundation Health Plan turned patient privacy into a digital product. By embedding third-party tracking code on its websites and apps, the health giant allegedly allowed tech companies like Google and Microsoft to intercept the sensitive medical interactions of…
TL;DR: Self Esteem Brands, the parent company behind major fitness and wellness labels, allowed a massive security breach to persist for nearly six months, exposing the most sensitive personal information of its customers and employees. Between December 2023 and June…
TLDR The Washington Post (owned by Amazon’s very own Jeff Bezos) allegedly allowed a massive data breach to persist for over a month, exposing the bank account and routing numbers of approximately 10,000 employees and contractors. The evil company failed…
TL;DR According to the Federal Trade Commission (FTC), Illuminate Education, Inc. failed to implement basic, low-cost security measures to protect the sensitive personal data of over 10 million K-12 students. Despite marketing itself as a “trustworthy” custodian of child data,…
According to the Federal Trade Commission, Illusory Systems, Inc. (doing business as Nomad) marketed its “cross-chain bridge” as a “security-first” solution while internally neglecting basic safety protocols. This corporate negligence culminated in a catastrophic security breach in August 2022, where…
According to a new class action lawsuit, GHC-SCW, a non-profit health insurer, collected vast amounts of sensitive patient data (names, addresses, Social Security numbers, and protected health information) while promising strong privacy protections, then allegedly failed to implement basic security…
TL;DR: A new federal class action lawsuit accuses Google of quietly switching on its Gemini AI “Smart features” across Gmail, Chat, and Meet around October 10, 2025, so the company could read, analyze, and store years of private messages and…