Terms Unconditional

Companies

Every company record in the dataset, worst first. Rows marked unverified have not been checked against a primary source.

Results

Equinox

Library, Fitness & Home · unverified

Nothing confirmed

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

Equitable

F500 Insurance Remainder · unverified

Life insurance and retirement accounts with the multi-decade retention profile common to this sector.

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

Estée Lauder

F500 Consumer Brands · unverified

Two separate major breaches including a very recent 2026 incident is the finding, and cosmetics retail carries a specific additional exposure…

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

Etihad Airways

Global Airlines (Top 40) · unverified

Nothing confirmed

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

Eversource Energy

F500 Electric-Gas Utilities · unverified

New England utility, subject of significant state regulatory scrutiny in Connecticut over rate increases and performance.

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

Exelon

F500 Electric-Gas Utilities · unverified

Exelon is the parent of Pepco, BGE and Delmarva Power - the three utilities serving most of DC, Maryland and Delaware, documented individually in the Power…

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

ExpressVPN (Kape Technologies)

Gig Economy, VPN & Subs · unverified

ExpressVPN is owned by Kape Technologies, and the ownership history is the finding: Kape was formerly named Crossrider, a company whose earlier business…

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

Extended Stay America

Hotels & Lodging · unverified

Extended-stay lodging occupies a legal grey zone that matters enormously to the people in it: a guest staying weeks or months may be functionally a tenant…

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

EyeMed Vision Care

Life-Health-Dental Insurance · unverified

A hacker sat inside an EyeMed employee's email account for roughly a week in June 2020 and reached personal and vision-plan health information for around 2.1…

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

FVCbank

Banks (DMV) · unverified

FVCbank specializes in banking TITLE AND ESCROW COMPANIES — meaning it's a central hub for the money and paperwork involved in people's HOME PURCHASES across…

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

Fairfax Water

Transit, Tolls & Water · unverified

Nothing confirmed

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

Fandango (incl. RottenTomatoes.com)

Home Security & Entertainment · unverified

The January 2026 tracking-pixel suit against Fandango sits on the other side of the line the AMC and Regal rulings drew…

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

Fannie Mae

F500 Financial Svcs Remainder · unverified

Nothing confirmed

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

Fastmail

Email Providers · unverified

Nothing confirmed

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

FedEx

Travel & Transit Apps · unverified

The 2025 FedEx exposure claimed by attackers (not confirmed by FedEx) was Salesforce-related, which places it inside the campaign documented in the F500 Tech…

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

Ferguson

F500 Wholesalers Remainder · unverified

Plumbing and HVAC distribution, primarily to trade customers but with showrooms serving homeowners directly on renovation projects.

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

Fifth Third Bancorp

F500 Banks & Financial · unverified

Nothing confirmed

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

First Citizens BancShares

F500 Banks & Financial · unverified

Nothing confirmed

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

Fiserv

F500 Financial Svcs Remainder · unverified

Fiserv's findings are directly consumer-relevant because of how many banks and credit unions run on its infrastructure - a very large share of American…

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

Fitbit (Google)

Consumer Apps · unverified

HIPAA — the law most people assume protects their health data — does NOT cover Fitbit at all, because it only applies to hospitals, health plans, and their…

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

FlightAware / Flighty

Travel & Transit Apps · unverified

Nothing confirmed

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

Four Seasons Hotels and Resorts

Hotels & Lodging · unverified

The luxury hospitality business model is built on remembering things about you, and the guest preference file is the product…

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

Fox Rent A Car

Car Rental & Mobility · unverified

The deep-value rental segment concentrates the sector's consumer complaints in one place: charges added at the counter to a booking already prepaid online…

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

Freddie Mac

F500 Financial Svcs Remainder · unverified

Freddie Mac holds or guarantees loan-level data — income, credit, property, payment history — on a very large share of American mortgages, and the homeowner…

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

Freedom Bank of Virginia

Banks (DMV) · unverified

A small Northern Virginia community bank, and the finding is opacity rather than misconduct: account terms, fee schedules and the deposit agreement were not…

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

Frontpoint Security

Home Security & Entertainment · unverified

Nothing confirmed

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

GE HealthCare Technologies

F500 Healthcare Providers · unverified

Nothing confirmed

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

GIPHY (Shutterstock)

Media, News & Creative Apps · unverified

Meta acquired GIPHY in 2020 and was ordered to divest it by the UK Competition and Markets Authority (ruling Nov 2021, re-issued Oct 2022 after appeal)…

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

GMX Mail

Email Providers · unverified

Nothing confirmed

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

GRIS

Niche Apps & Games · unverified

Nothing confirmed

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

Gap

F500 Retail & Grocery · unverified

Gap, Old Navy, Banana Republic and Athleta share one company and one loyalty infrastructure, so a customer shopping across four apparently different brands at…

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

General Mills

F500 Consumer Goods & Food · unverified

Retail-mediated packaged food where the meaningful consumer data comes from branded websites, games and promotions rather than purchases…

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

General Motors

F500 Auto & Dealerships · unverified

See the GM/myChevrolet row in Auto Apps for the fully detailed findings.

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

Genius Scan

Media, News & Creative Apps · unverified

Nothing confirmed

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

Genuine Parts

F500 Wholesalers Remainder · unverified

Owner of NAPA Auto Parts, which is consumer-facing through retail stores, and of industrial parts distribution.

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

Getaround

Car Rental & Mobility · unverified

Getaround installs connected hardware in host vehicles to enable keyless access, which means a permanently fitted tracking device sits in a private person's…

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

Gilead Sciences

F500 Pharma & Biotech · unverified

Nothing confirmed

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

Gojek

Travel & Transit Apps · unverified

Nothing confirmed

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

Goldman Sachs

F500 Financial Svcs Remainder · unverified

Nothing confirmed

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

Goodyear Tire & Rubber

F500 Industrial Machinery · unverified

Nothing confirmed

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

Google (Gemini)

LLM Providers · unverified

Google's own privacy documentation tells you not to type anything confidential into Gemini - because human reviewers, including trained reviewers from…

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

Google Authenticator

Productivity & Comms Apps · unverified

Security researchers criticised the 2023 addition of cloud sync because it moved two-factor seeds - the secrets that generate your login codes - into a Google…

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

Google Docs

Productivity & Comms Apps · unverified

Same Google data framework as Drive, with the addition that Gemini integration means AI features can process document content.

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

Google Drive

Productivity & Comms Apps · unverified

Drive is governed by the same overall Google data framework documented in the Google/Alphabet row, and the specific thing worth flagging is scanning…

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

Google Fi

Retail & Fintech · unverified

The January 2023 Google Fi disclosure is notable for what it reveals about mobile virtual network operators…

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

Google Health

Health, Fitness & Misc Services · unverified

Nothing confirmed

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

Google Meet (formerly Google Duo)

Productivity & Comms Apps · unverified

Nothing product-specific confirmed this pass.

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

Google Play Music (discontinued)

Media, News & Creative Apps · unverified

Google Play Music was shut down in December 2020 with users migrated to YouTube Music, and the row exists to make the shutdown risk legible…

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned

Google Translate

Productivity & Comms Apps · unverified

Text pasted into Translate frequently includes exactly the material people are most careful about elsewhere - medical letters, legal documents, immigration…

Severity 2 of 5, not independently verified.
Last verified 96 days ago
Unassigned