This category is for the improper handling of customer or employee data can lead to breaches, exposing sensitive information and violating privacy laws.
Amazon Mapped Your Face for a Lipstick Sale. The Courts Just Confirmed You Can Sue. TL;DR The Technology: Amazon’s “Virtual Try-On” (VTO) feature, used for products like lipstick and eyewear, captures the unique geometry of your face from your device’s…
General Motors: A Multibillion-Dollar Privacy Betrayal TL;DR General Motors (GM) and its subsidiary OnStar systematically collected and sold massive amounts of sensitive driving data from millions of its customers without their informed consent. This data included precise geolocation tracked every…
Under Armour’s $5.2 Billion Negligence: Your Data is For Sale TL;DR The Breach: On November 17, 2025, the notorious ransomware group Everest stole 343 GB of data from Under Armour, a corporation with $5.2 billion in annual revenue. The Misconduct:…
Filed: November 18, 2025 | Class Action | Princeton, New Jersey Princeton University Left 100,000 People’s Most Personal Data Wide Open — Then Blamed a Phone Call TL;DR On November 10, 2025, cybercriminals breached Princeton University’s internal “University Advancement” donor…
TL;DR The Breach: Kaiser Foundation Health Plan embedded third-party tracking code in its websites and mobile apps, and that code transmitted patients’ private health data to outside companies without patient consent. The Scale: The settlement class covers Kaiser members across…
Data Breach / Corporate Accountability / Consumer Rights Self Esteem Brands Let a Massive Breach Run for Six Months. Now They’re Offering Victims $25. Source: Settlement Agreement and Release — Anderson v. Self Esteem Brands, LLC d/b/a Purpose Brands TL;DR…
Investigative Report • Data Breach • Workers’ Rights The Washington Post Exposed Its Workers’ Bank Accounts and Did Nothing For Weeks Filed: December 4, 2025 • Source: Federal Class Action Complaint, Kim v. WP Company LLC TL;DR A cyberattack on…
TL;DR Illuminate Education, a company that sold data tools to thousands of K-12 schools, failed to protect the sensitive personal data of more than 10 million children, and the Federal Trade Commission came after them for it. The data Illuminate…
“We’re Secure… Period.” The Lie Nomad Told Before Losing $100 Million of User Funds The Federal Trade Commission has charged Illusory Systems, Inc. — doing business as Nomad — with unfair and deceptive practices after a catastrophic 2022 hack drained…
EvilCorporations.com | Corporate Accountability Investigation Your Medical Secrets Were Left Unlocked Group Health Cooperative of South Central Wisconsin | Data Breach Lawsuit Filed May 2024 | $3.5M Settlement TL;DR Group Health Cooperative of South Central Wisconsin (GHC-SCW) suffered a data…