This category is for the improper handling of customer or employee data can lead to breaches, exposing sensitive information and violating privacy laws.
Surveillance Capitalism • Data Privacy • Class Action EvilCorporations.com • Case No. 1:26-cv-02405, E.D.N.Y. TL;DR A federal class action filed April 22, 2026 in the Eastern District of New York accuses JetBlue of secretly tracking travelers’ browsing behavior on its…
EvilCorporations.com • Case No. 26-CA-002430 • Hillsborough County, Florida • Estimated Reading Time: 9 minutes TL;DR European Wax Center allegedly ran tracking pixels, cookies, and analytics code on waxcenter.com that captured visitor data, including appointment-booking activity, and sent it to…
EvilCorporations.com • Case No. 0:26-cv-02418-ECT-DTS • District of Minnesota • Estimated Reading Time: 12 minutes TL;DR On April 17, 2026, a hacker group called ShinyHunters posted on the dark web claiming they had stolen over 9 million records from Medtronic,…
Data Breach • Healthcare • Iowa EvilCorporations.com • Case No. CVCV054132, District Court of Story County, Iowa • 9-minute read TL;DR In September 2023, Youth and Shelter Services, Inc. (YSS), an Iowa healthcare and addiction treatment nonprofit, suffered a targeted…
Class Action Investigation A class action lawsuit filed in Minnesota accuses Best Buy of quietly harvesting the personal data of over 200 million customers and feeding it through a data broker’s “clean room” to sell precision advertising profiles to third-party…
EvilCorporations.com • Sophin v. WISP, Inc. • Settlement Agreement • ~6 min read TL;DR WISP, Inc., a telehealth and beauty brand, was sued in a class action lawsuit for allegedly disclosing customers’ private health and personal data to Meta, Google,…
EvilCorporations.com • Jackson v. Ciox Health LLC d/b/a Datavant Group, No. CV2025-062690 • Estimated reading time: 9 minutes Your Social Security Number Was Left in an Inbox. Datavant Got a Deal. You Got $15. A phishing attack exposed the most…
TL;DR Illuminate Education, a for-profit edtech company, collected students’ medical records including mental health diagnoses, special education details, and treatment plans from K-12 school districts across California. A cyberattack running from December 28, 2021 through January 8, 2022 gave hackers…
Absolute Dental Group Data Breach Settlement 2025 TL;DR 1,223,437 dental patients had their Social Security numbers, medical diagnoses, treatment records, insurance information, and personal contact details stolen in a cyberattack that ran unchecked for 15 days. Absolute Dental Group, LLC…
EvilCorporations.com | Investigative Data Journalism | The AI Trust Gap Series Case 3:26-cv-02161 | Filed March 12, 2026 | Northern District of California | EvilCorporations.com Investigation Woflow Sold You a Vault. ShinyHunters Found the Door Unlocked. TL;DR Woflow Inc., a…