This category is for the improper handling of customer or employee data can lead to breaches, exposing sensitive information and violating privacy laws.
TL;DR The Breach: Kaiser Foundation Health Plan embedded third-party tracking code in its websites and mobile apps, and that code transmitted patients’ private health data to outside companies without patient consent. The Scale: The settlement class covers Kaiser members across…
Data Breach / Corporate Accountability / Consumer Rights Self Esteem Brands Let a Massive Breach Run for Six Months. Now They’re Offering Victims $25. Source: Settlement Agreement and Release — Anderson v. Self Esteem Brands, LLC d/b/a Purpose Brands TL;DR…
Investigative Report • Data Breach • Workers’ Rights The Washington Post Exposed Its Workers’ Bank Accounts and Did Nothing For Weeks Filed: December 4, 2025 • Source: Federal Class Action Complaint, Kim v. WP Company LLC TL;DR A cyberattack on…
TL;DR Illuminate Education, a company that sold data tools to thousands of K-12 schools, failed to protect the sensitive personal data of more than 10 million children, and the Federal Trade Commission came after them for it. The data Illuminate…
“We’re Secure… Period.” The Lie Nomad Told Before Losing $100 Million of User Funds The Federal Trade Commission has charged Illusory Systems, Inc. — doing business as Nomad — with unfair and deceptive practices after a catastrophic 2022 hack drained…
EvilCorporations.com | Corporate Accountability Investigation Your Medical Secrets Were Left Unlocked Group Health Cooperative of South Central Wisconsin | Data Breach Lawsuit Filed May 2024 | $3.5M Settlement TL;DR Group Health Cooperative of South Central Wisconsin (GHC-SCW) suffered a data…
Surveillance State / Big Tech / Digital Rights Google’s AI Read Your Emails. You Didn’t Say Yes. Filed: November 11, 2025 | Class Action | Source: U.S. District Court, Northern District of California TL;DR On or about October 10, 2025,…
TL;DR Elephant Insurance built a quoting tool that could auto-populate your driver’s license number from just your name, address, and date of birth — and hackers exploited it to steal the license numbers of nearly 3 million people between March…
TL;DR On or about October 29, 2023, cybercriminals breached Medical Center Barbour’s systems and potentially accessed the Social Security numbers, passport numbers, biometric data, and private medical records of current and former patients and employees. MCBH waited until August 2024,…
TL;DR Paramount Skydance and its subsidiary Pluto TV secretly installed Google and Microsoft surveillance software inside the “Kids” section of Pluto TV, capturing which specific videos children under 13 were watching and transmitting that data to advertisers without any parental…