Enterprise (Enterprise Holdings, incl. National, Alamo)
Nothing confirmed
Every company record in the dataset, worst first. Rows marked unverified have not been checked against a primary source.
Nothing confirmed
Nothing confirmed
Life insurance and retirement accounts with the multi-decade retention profile common to this sector.
Two separate major breaches including a very recent 2026 incident is the finding, and cosmetics retail carries a specific additional exposure…
Nothing confirmed
New England utility, subject of significant state regulatory scrutiny in Connecticut over rate increases and performance.
Exelon is the parent of Pepco, BGE and Delmarva Power - the three utilities serving most of DC, Maryland and Delaware, documented individually in the Power…
ExpressVPN is owned by Kape Technologies, and the ownership history is the finding: Kape was formerly named Crossrider, a company whose earlier business…
Extended-stay lodging occupies a legal grey zone that matters enormously to the people in it: a guest staying weeks or months may be functionally a tenant…
A hacker sat inside an EyeMed employee's email account for roughly a week in June 2020 and reached personal and vision-plan health information for around 2.1…
FVCbank specializes in banking TITLE AND ESCROW COMPANIES — meaning it's a central hub for the money and paperwork involved in people's HOME PURCHASES across…
Nothing confirmed
The January 2026 tracking-pixel suit against Fandango sits on the other side of the line the AMC and Regal rulings drew…
Nothing confirmed
Nothing confirmed
The 2025 FedEx exposure claimed by attackers (not confirmed by FedEx) was Salesforce-related, which places it inside the campaign documented in the F500 Tech…
Plumbing and HVAC distribution, primarily to trade customers but with showrooms serving homeowners directly on renovation projects.
Nothing confirmed
Nothing confirmed
Fiserv's findings are directly consumer-relevant because of how many banks and credit unions run on its infrastructure - a very large share of American…
HIPAA — the law most people assume protects their health data — does NOT cover Fitbit at all, because it only applies to hospitals, health plans, and their…
Nothing confirmed
The luxury hospitality business model is built on remembering things about you, and the guest preference file is the product…
The deep-value rental segment concentrates the sector's consumer complaints in one place: charges added at the counter to a booking already prepaid online…
Freddie Mac holds or guarantees loan-level data — income, credit, property, payment history — on a very large share of American mortgages, and the homeowner…
A small Northern Virginia community bank, and the finding is opacity rather than misconduct: account terms, fee schedules and the deposit agreement were not…
Nothing confirmed
Nothing confirmed
Meta acquired GIPHY in 2020 and was ordered to divest it by the UK Competition and Markets Authority (ruling Nov 2021, re-issued Oct 2022 after appeal)…
Nothing confirmed
Nothing confirmed
Gap, Old Navy, Banana Republic and Athleta share one company and one loyalty infrastructure, so a customer shopping across four apparently different brands at…
Retail-mediated packaged food where the meaningful consumer data comes from branded websites, games and promotions rather than purchases…
See the GM/myChevrolet row in Auto Apps for the fully detailed findings.
Nothing confirmed
Owner of NAPA Auto Parts, which is consumer-facing through retail stores, and of industrial parts distribution.
Getaround installs connected hardware in host vehicles to enable keyless access, which means a permanently fitted tracking device sits in a private person's…
Nothing confirmed
Nothing confirmed
Nothing confirmed
Nothing confirmed
Google's own privacy documentation tells you not to type anything confidential into Gemini - because human reviewers, including trained reviewers from…
Security researchers criticised the 2023 addition of cloud sync because it moved two-factor seeds - the secrets that generate your login codes - into a Google…
Same Google data framework as Drive, with the addition that Gemini integration means AI features can process document content.
Drive is governed by the same overall Google data framework documented in the Google/Alphabet row, and the specific thing worth flagging is scanning…
The January 2023 Google Fi disclosure is notable for what it reveals about mobile virtual network operators…
Nothing confirmed
Nothing product-specific confirmed this pass.
Google Play Music was shut down in December 2020 with users migrated to YouTube Music, and the row exists to make the shutdown risk legible…
Text pasted into Translate frequently includes exactly the material people are most careful about elsewhere - medical letters, legal documents, immigration…
Try fewer filters, or clear them all.