This category is for the improper handling of customer or employee data can lead to breaches, exposing sensitive information and violating privacy laws.
TL;DR Elephant Insurance built a quoting tool that could auto-populate your driver’s license number from just your name, address, and date of birth — and hackers exploited it to steal the license numbers of nearly 3 million people between March…
TL;DR On or about October 29, 2023, cybercriminals breached Medical Center Barbour’s systems and potentially accessed the Social Security numbers, passport numbers, biometric data, and private medical records of current and former patients and employees. MCBH waited until August 2024,…
TL;DR Paramount Skydance and its subsidiary Pluto TV secretly installed Google and Microsoft surveillance software inside the “Kids” section of Pluto TV, capturing which specific videos children under 13 were watching and transmitting that data to advertisers without any parental…
TL;DR On October 31, 2025, hackers broke into University of Pennsylvania email accounts and blasted thousands of students, faculty, alumni, and parents with a mass threat: “all your data will be leaked.” The stolen data includes names, home addresses, and…
TL;DR CRI Genetics earned $42.8 million (enough to pay a year’s rent for over 1,100 families) between 2017 and 2021 selling DNA tests it falsely claimed were “99.9% accurate” and backed by a “patented algorithm”. Just one smol problem tho:…
AXS is one of the two ginormous as the digital gatekeepers for millions of fans seeking access to the musical performances in the world’s most iconic arenas, theaters, and stadiums. They’re second in size only to Ticketmaster, and this powerful…
I just got an email from Harrod’s stating that many of its customers recently suffered a data breach of our personal information. According to a notice sent to affected customers, that stolen personal information is now being actively used in…
Investigative Report • Corporate Accountability • Data Security 167,000 Ruger Owners Had Their Private Data Exposed Filed: October 4, 2022 • Source: Class Action Complaint, U.S. District Court for the District of Connecticut TL;DR Ruger’s online store, ShopRuger.com, was infected…
TL;DR Microsoft’s surveillance software, called Clarity, recorded a woman’s every click, scroll, and keystroke on a pet supply shopping website without her knowledge or consent. Clarity captures over 30 categories of data per user visit, including mouse movements, text input,…
TL;DR A hacker broke into a Rialto Markets employee’s email and sat there, undetected, for over three months, reading the Social Security numbers, driver’s license numbers, and home addresses of 4,400+ customers. While inside that email account, the hacker then…