This category is for the improper handling of customer or employee data can lead to breaches, exposing sensitive information and violating privacy laws.
TL;DR On October 31, 2025, hackers broke into University of Pennsylvania email accounts and blasted thousands of students, faculty, alumni, and parents with a mass threat: “all your data will be leaked.” The stolen data includes names, home addresses, and…
TL;DR CRI Genetics earned $42.8 million (enough to pay a year’s rent for over 1,100 families) between 2017 and 2021 selling DNA tests it falsely claimed were “99.9% accurate” and backed by a “patented algorithm”. Just one smol problem tho:…
AXS is one of the two ginormous as the digital gatekeepers for millions of fans seeking access to the musical performances in the world’s most iconic arenas, theaters, and stadiums. They’re second in size only to Ticketmaster, and this powerful…
I just got an email from Harrod’s stating that many of its customers recently suffered a data breach of our personal information. According to a notice sent to affected customers, that stolen personal information is now being actively used in…
Investigative Report • Corporate Accountability • Data Security 167,000 Ruger Owners Had Their Private Data Exposed Filed: October 4, 2022 • Source: Class Action Complaint, U.S. District Court for the District of Connecticut TL;DR Ruger’s online store, ShopRuger.com, was infected…
TL;DR Microsoft’s surveillance software, called Clarity, recorded a woman’s every click, scroll, and keystroke on a pet supply shopping website without her knowledge or consent. Clarity captures over 30 categories of data per user visit, including mouse movements, text input,…
TL;DR A hacker broke into a Rialto Markets employee’s email and sat there, undetected, for over three months, reading the Social Security numbers, driver’s license numbers, and home addresses of 4,400+ customers. While inside that email account, the hacker then…
Investigative Report • Health Privacy • Class Action Filed August 13, 2025 Your Heart Rate. Your Stress. Your Pregnancy. Sold. WHOOP promised your most intimate physiological data was “always protected.” A federal class action lawsuit says the company secretly embedded…
Surveillance Tech / Domestic Abuse / FTC Enforcement SpyFone Built a Business on Stalking and Domestic Abuse Source: FTC Complaint — Docket C-4756 — Issued December 20, 2021 TL;DR A company called SpyFone (operating as Support King, LLC) sold secret…
Data Security Failure Eight Years. 1,624 Accounts. $150,000 Slap. EvilCorporations.com • AWC No. 2021073472601 • 7 min read TL;DR For eight years (January 2014 through March 2022), Wells Fargo failed to cut off data access for former employees when they…