This category is for the improper handling of customer or employee data can lead to breaches, exposing sensitive information and violating privacy laws.
TL;DR Lucent Health Solutions, a Nashville-based third-party administrator that handles health, dental, and vision data for self-insured employers, let cybercriminals into a corporate email account around October 2, 2023, exposing the private medical and identity information of roughly 37,000 people.…
TL;DR A Colorado class action filed June 4, 2026 accuses credit bureau Equifax of listing the cell phone numbers of thousands of Colorado residents in its for-sale commercial directories without ever asking for permission. The lawsuit says this violates Colorado’s…
7-Eleven Left 600,000 People’s Social Security Numbers Unencrypted. Hackers Took Them. TL;DR A class action filed May 29, 2026 in federal court in Dallas alleges 7-Eleven, Inc. failed to protect the personal data of over 600,000 people whose records were…
The Washington Post Turned Your Reading Habits Into a Weapon to Overcharge You TL;DR A class action filed June 11, 2026, in D.C. Superior Court accuses The Washington Post of secretly harvesting subscriber data since the mid-2010s and using it…
Allina Sent Your Medical Website Clicks to Facebook and Google. The Price Tag: $12.5 Million TL;DR Allina Health System, a major Minnesota hospital operator, is accused of installing tracking pixels and cookies on its websites that fed patients’ personal and…
TL;DR Home Depot operates 233 California stores and, primarily through vendor Flock Safety, has installed license plate cameras at store entrances and exits that photograph every vehicle, log the timestamp and location, and feed the data into a searchable, nationwide…
TL;DR ADT Inc., one of the largest home and commercial security companies in the U.S., suffered a confirmed data breach on or about April 20, 2026, when a hacker operating under the alias ShinyHunters infiltrated ADT’s network and exfiltrated customer…
Summary TL;DR Bray International Inc., an industrial valve manufacturer based in Texas, suffered a data breach in April 2024 that exposed the personal information of an unknown number of people, potentially including names, Social Security numbers, and driver’s license numbers.…
Data Breach • Corporate Accountability • Worker Rights EvilCorporations.com • Canup et al. v. Gas Express LLC d/b/a Circle K, Case No. 25EV012357 • 6.9 min read TL;DR On May 20, 2024, a cyberattack hit Gas Express LLC, the franchisee…
EvilCorporations.com • Case No. 4:23-cv-03594-HSG • Estimated Reading Time: 6.9 minutes TL;DR Willow TV, operated by Times Internet (UK) Ltd., installed Meta’s tracking Pixel on its website and allegedly shared subscribers’ personally identifiable information (PII) with Meta without consent, in…