This category is for the improper handling of customer or employee data can lead to breaches, exposing sensitive information and violating privacy laws.
Data Breach Investigation iHeartMedia Exposed Your Social Security Number, Health Records, and Bank Data for Four Days EvilCorporations.com • December 24–27, 2024 Breach / April 2025 Disclosure • 11 min read Between Christmas Eve and the day after Christmas 2024,…
Boston Medical Center Left Its Own Workers Exposed to Identity Theft EvilCorporations.com • Data Breach / Healthcare Negligence • 7 min read TL;DR On March 9, 2025, Boston Medical Center’s IT team detected unauthorized access to at least one employee’s…
EvilCorporations.com • Data Breach Investigation • 6 min read 10 Months Blind: How Slim CD Let Hackers Roam Free Inside Your Payment Data A payment processing company sat on a security breach for nearly a year. By the time it…
Data Breach Investigation Why Did DRH Health Stay Silent for 7 Months After a Massive Data Breach? A healthcare system handed over patient data to a third-party debt collector. That collector got hacked. DRH Health found out in July 2024…
Investigative Report • Healthcare Data • Corporate Negligence Your Addiction Treatment Records Were Stolen. BayMark Sent You a Coupon. A nationwide operator of opioid treatment programs exposed the most sensitive medical data possible to unknown hackers for three weeks before…
FTC Complaint • Docket No. 202-3133 • United States of America GoDaddy Lied About Security While Leaving Millions Vulnerable to Cyberattacks EvilCorporations.com • FTC v. GoDaddy Inc. • 22 min read For at least seven years, GoDaddy sold “award-winning security”…
Data Security Breach • Identity Theft Risk • Corporate Negligence Your Fingerprints. Your Social Security Number. Their Security Failure. EvilCorporations.com • Best Collateral, Inc. / Data Breach 2025 • 5 min read TL;DR Best Collateral, Inc., a collateral lending company,…
TL;DR Kochava Inc., a data broker headquartered in Sandpoint, Idaho, built a commercial surveillance system that tracks the precise movements of hundreds of millions of Americans using GPS coordinates pulled from their phones, accurate to within 10 meters, and sold…
Data Security Failure • FTC Complaint • Docket No. C-4782 How Did Chegg Allow Four Data Breaches in Just Three Years? EvilCorporations.com • FTC v. Chegg, Inc. • 9 min read TL;DR Chegg, an education company serving primarily high school…
Data Privacy Violation • 7th Circuit Court of Appeals MeTV Embedded a Facebook Spy Pixel in Every Video You Watched EvilCorporations.com • Case No. 24-1290, 7th Cir. (2025) • 7 min read TL;DR MeTV, the classic TV streaming website, embedded…