Charter Communications (Spectrum)
Same company documented in the Charter Spectrum row of Internet Providers - one of the ISPs the FTC compelled records from under 6(b) orders…
Unassigned
Companies
Every company record in the dataset, worst first. Rows marked unverified have not been checked against a primary source.
Results
ChexSystems
ChexSystems is the database banks check when someone tries to open a checking account.
Unassigned
China Eastern Airlines
Nothing confirmed
Unassigned
China Southern Airlines
Nothing confirmed
Unassigned
Chipotle
The exact same practice under scrutiny across the restaurant industry — charging MORE for delivery orders than in-store pickup, sometimes 13% higher on the…
Unassigned
Choice Hotels International
Choice Hotels franchises about 7,600 hotels with roughly 1,700 corporate employees — a ratio that tells you exactly where your data actually lives.
Unassigned
Chubb
Nothing confirmed
Unassigned
Cincinnati Financial
Distributes exclusively through independent agencies, so policyholder data — including claims files containing photographs, medical records and recorded…
Unassigned
Cisco Systems
Cisco disclosed in August 2025 that a voice-phishing call to a Cisco representative let an attacker export basic Cisco.com user-profile data from a…
Unassigned
City First Bank
City First's privacy story is genuinely good — a plain 'we do not sell your data' commitment that's rare in this whole tracker.
Unassigned
Clarity Money (Goldman Sachs)
Clarity Money was shut down by Goldman Sachs in March 2021, and the row's value is as a worked example of what happens to a personal finance app's data when…
Unassigned
ClassPass
Nothing confirmed
Unassigned
Clever
Nothing confirmed
Unassigned
CloZ (AI Stylist/Digital Wardrobe)
To use CloZ as designed, you upload photos of your actual clothes — and often yourself wearing them…
Unassigned
Clue (BioWink GmbH)
Clue says the cycle and symptom data you log is never sold or given to advertisers, but its own policy describes two exceptions to watch…
Unassigned
Co-Star
Nothing confirmed
Unassigned
Colgate-Palmolive
Nothing confirmed
Unassigned
Colonial Life (Unum)
Nothing confirmed
Unassigned
Colonial Parking (DC-specific) / SP+ (Metropolis Technologies)
Correction: Colonial Parking is a local, family-owned DC-area operator (founded 1953), not a brand of SP+.
Unassigned
CommonWell Health Alliance
CommonWell is a nationwide record-exchange network founded by EHR companies, and it is one of the ten federally designated QHINs under TEFCA.
Unassigned
Compass
Nothing confirmed
Unassigned
Conagra Brands
Packaged food sold through retailers with minimal direct consumer data.
Unassigned
Concentrix
Nothing consumer-facing confirmed this pass, and the honest entry is more useful than a null: Concentrix is one of the largest customer-experience outsourcing…
Unassigned
Congressional Bank
Congressional Bank looks like a small Bethesda community bank, but it also has fintech partnerships…
Unassigned
Consolidated Edison
This utility's meters generate the occupancy-revealing consumption record at issue in the Naperville ruling.
Unassigned
Constellation Brands
Alcohol producer selling through three-tier distribution, which structurally prevents a direct consumer relationship in most states.
Unassigned
Constellation Energy
Constellation was separated from Exelon in 2022 and is now the generation business, while Exelon retains the regulated utilities including Pepco, BGE and…
Unassigned
Copa Airlines
Nothing confirmed
Unassigned
Corebridge Financial
Corebridge was caught in the MOVEit vulnerability - the 2023 file-transfer flaw that produced breaches across dozens of unrelated organisations documented…
Unassigned
Cox Communications
Nothing confirmed
Unassigned
Cracker Barrel
Nothing confirmed
Unassigned
CrossFit
The Life Time and Gold's Gym rows record a Mindbody vendor exposure; whether CrossFit affiliates…
Unassigned
CureMD
Nothing confirmed
Unassigned
DC Water
Nothing confirmed
Unassigned
DJI GO / DJI Fly
DJI has been the subject of a years-long national security controversy and US restrictions, and the consumer-facing detail that gets lost in it is what a…
Unassigned
DTE Energy
Michigan utility that has been widely reported to face sustained regulatory and legislative criticism over reliability and outage duration, and over the size…
Unassigned
Day One
Nothing confirmed
Unassigned
DeepSeek (Hangzhou DeepSeek AI Co., Ltd.)
DeepSeek's early-2025 privacy policy was widely reported to list 'keystroke patterns or rhythms' among collected data…
Unassigned
Dollar Car Rental (Hertz)
Dollar is Hertz, and so is Thrifty — one company operating three price tiers that a renter experiences as competing options.
Unassigned
Dollar General
Nothing confirmed
Unassigned
Dollar Tree
The 'broken banner' case in D'Antonio is the finding, and it names the failure precisely: a cookie consent banner that presented choices which did not…
Unassigned
DrChrono (EverHealth / EverCommerce)
No DOJ, OCR, FTC, state AG, information-blocking or breach finding against DrChrono was verified this pass.
Unassigned
Duke Energy
Nothing confirmed
Unassigned
Duo Mobile (Cisco)
Nothing confirmed
Unassigned
Duolingo
Duolingo's own CEO has publicly admitted that roughly 20% of AI-generated stories were 'just pure slop' (his loose estimate, not data)…
Unassigned
ESPN+ (Disney)
Streaming services are squarely within the Video Privacy Protection Act, which is why class actions in this category are numerous and why the AMC and Regal…
Unassigned
ETS GRE app
Nothing confirmed
Unassigned
Elation Health
Nothing confirmed
Unassigned
Elevate
Nothing confirmed
Unassigned
Entergy
Nothing confirmed
Unassigned
Try fewer filters, or clear them all.