This category is for the improper handling of customer or employee data can lead to breaches, exposing sensitive information and violating privacy laws.
Data Breach Investigation Why Did DRH Health Stay Silent for 7 Months After a Massive Data Breach? A healthcare system handed over patient data to a third-party debt collector. That collector got hacked. DRH Health found out in July 2024…
Investigative Report • Healthcare Data • Corporate Negligence Your Addiction Treatment Records Were Stolen. BayMark Sent You a Coupon. A nationwide operator of opioid treatment programs exposed the most sensitive medical data possible to unknown hackers for three weeks before…
FTC Complaint • Docket No. 202-3133 • United States of America GoDaddy Lied About Security While Leaving Millions Vulnerable to Cyberattacks EvilCorporations.com • FTC v. GoDaddy Inc. • 22 min read For at least seven years, GoDaddy sold “award-winning security”…
Data Security Breach • Identity Theft Risk • Corporate Negligence Your Fingerprints. Your Social Security Number. Their Security Failure. EvilCorporations.com • Best Collateral, Inc. / Data Breach 2025 • 5 min read TL;DR Best Collateral, Inc., a collateral lending company,…
TL;DR Kochava Inc., a data broker headquartered in Sandpoint, Idaho, built a commercial surveillance system that tracks the precise movements of hundreds of millions of Americans using GPS coordinates pulled from their phones, accurate to within 10 meters, and sold…
Data Security Failure • FTC Complaint • Docket No. C-4782 How Did Chegg Allow Four Data Breaches in Just Three Years? EvilCorporations.com • FTC v. Chegg, Inc. • 9 min read TL;DR Chegg, an education company serving primarily high school…
Data Privacy Violation • 7th Circuit Court of Appeals MeTV Embedded a Facebook Spy Pixel in Every Video You Watched EvilCorporations.com • Case No. 24-1290, 7th Cir. (2025) • 7 min read TL;DR MeTV, the classic TV streaming website, embedded…
TL;DR The Corporation: Global Tel*Link (GTL), doing business as ViaPath Technologies, a major player in the prison telecom industry, suffered a massive data breach. The Victims: Incarcerated individuals and their families—a vulnerable population whose most sensitive personal data was exposed.…
FTC Enforcement Action • Docket No. C-4802 Your Phone Was a Surveillance Device. They Sold the Recordings. EvilCorporations.com • FTC v. X-Mode Social / Outlogic, Docket No. C-4802 • 28 min read X-Mode Social and its successor Outlogic harvested precise…
The Data Trap: ITMedia’s Predatory Loan Empire TL;DR A sprawling network of companies under the “ITMedia” banner operated over 200 websites like badcreditloans.com, luring financially vulnerable people with promises of “trusted lenders.” They collected highly sensitive data including Social Security…