This category is for the improper handling of customer or employee data can lead to breaches, exposing sensitive information and violating privacy laws.
TL;DR Cannabis retailer STIIIZY, Inc. suffered a data breach around October 2024, disclosed on January 7, 2025, exposing the private information of 387,555 people, including 232,578 California residents. The stolen data included personally identifiable information and private health information from…
TL;DR A pathology lab in North Carolina, Marlboro-Chesterfield Pathology, P.C., let a third party break into its systems and grab patients’ names, dates of birth, Social Security numbers, medical treatment information, and health insurance details. The breach was discovered on…
TL;DR On or about September 17, 2024, cybercriminals broke into the network of Physicians Primary Care of Southwest Florida and stole the private information of tens of thousands of patients, including names, Social Security numbers, and protected health information. The…
TL;DR An Iowa trucking company called Schuster Company let hackers into its network for roughly a week in January 2024, exposing names, Social Security numbers, dates of birth, and driver’s license numbers of current and former employees and clients. The…
TL;DR A California class action filed June 24, 2026 accuses Apple of selling Safari as a privacy fortress while the browser leaks identifying data to third-party trackers who use “fingerprinting” to follow users across the web. Apple’s headline promise. that…
TL;DR Atrium Health, a public hospital authority in Charlotte, North Carolina, ran third-party tracking pixels from Meta and Google on its website and patient portal, allegedly leaking patient health-related information to those tech companies. The alleged tracking on the patient…
TL;DR Hackers used compromised credentials to break into 700Credit’s web application 700Dealer.com on October 25, 2025, exposing the private information of roughly 5.8 million people whose data car dealerships had handed over. The stolen data included names, addresses, dates of…
TL;DR Lucent Health Solutions, a Nashville-based third-party administrator that handles health, dental, and vision data for self-insured employers, let cybercriminals into a corporate email account around October 2, 2023, exposing the private medical and identity information of roughly 37,000 people.…
TL;DR A Colorado class action filed June 4, 2026 accuses credit bureau Equifax of listing the cell phone numbers of thousands of Colorado residents in its for-sale commercial directories without ever asking for permission. The lawsuit says this violates Colorado’s…
7-Eleven Left 600,000 People’s Social Security Numbers Unencrypted. Hackers Took Them. TL;DR A class action filed May 29, 2026 in federal court in Dallas alleges 7-Eleven, Inc. failed to protect the personal data of over 600,000 people whose records were…