Grasshopper (coding, Google)
Nothing confirmed
Unassigned
Companies
Every company record in the dataset, worst first. Rows marked unverified have not been checked against a primary source.
Results
Grubhub
Grubhub confirmed in January 2026 that unauthorized parties had downloaded data from certain of its systems…
Unassigned
Guardian Life
Nothing confirmed
Unassigned
GuideWell Mutual
Nothing confirmed
Unassigned
HP
Nothing confirmed
Unassigned
Habitify
Nothing confirmed
Unassigned
Happier Meditation
Nothing confirmed
Unassigned
Harris Teeter (Kroger)
Harris Teeter is wholly owned by Kroger, so the findings that matter here are Kroger's - including the two pharmacy-specific class actions documented in the…
Unassigned
Headspace
Mozilla's Privacy Not Included guide flagged Headspace in 2023 for sharing personal and app-usage data with third parties such as Google and Facebook for ad…
Unassigned
Healthy Minds Program
Nothing confirmed
Unassigned
Hershey
Retail-mediated confectionery with little direct consumer data.
Unassigned
Hertz
Hertz's 2024-25 exposure came through a third-party vendor, and rental car data is more revealing than the transaction suggests…
Unassigned
Hewlett Packard (HPE)
Nothing consumer-facing confirmed this pass.
Unassigned
Hilton Honors
Multiple separate breaches across a decade, including the shared Otelier vendor incident (2024 intrusion, disclosed January 2025) that also caught Hyatt and…
Unassigned
Homes.com
Homes.com is a CoStar Group property, and its own footer lists eight sibling marketplaces — Apartments.com, ApartmentFinder, ApartmentHomeLiving, ForRent…
Unassigned
Honeywell
Nothing consumer-facing confirmed this pass on data, but Honeywell is worth more than a boilerplate B2B entry because of residential connected products…
Unassigned
Hormel Foods
Packaged meat sold through retailers with minimal direct consumer data.
Unassigned
Hushmail
Nothing confirmed
Unassigned
Hyundai (Bluelink)
According to prior research (not re-verified against Hyundai's current terms this pass), opting out of Hyundai's data collection isn't one step…
Unassigned
I Love Hue Too
Nothing confirmed
Unassigned
IQVIA
IQVIA is the row on this tab that deserves the most attention and generates the least public record, which is itself the finding.
Unassigned
Imprint
Nothing confirmed
Unassigned
Indeed (Recruit Holdings)
Nothing confirmed
Unassigned
Industrial Bank
Despite being one of the largest African American-owned community banks in the US — founded in Washington, DC in 1934…
Unassigned
InnerNow (Chopra Enterprises)
Nothing confirmed
Unassigned
Innovis
Nothing confirmed
Unassigned
Insight Timer
Mozilla's 2022 review of 32 mental health and prayer apps gave the warning label to 28 of them (initially 29, later revised) and concluded the category was…
Unassigned
Instagram Layout (Meta)
Layout is governed entirely by Meta's overall data practices with no separate agreement, and the finding is that distinction's absence…
Unassigned
Interactive Brokers
Nothing confirmed
Unassigned
Intuitive Surgical
Nothing confirmed
Unassigned
J.M. Smucker
Retail-mediated packaged food. Smucker's most consumer-visible events have been recalls, including a significant Jif peanut butter salmonella recall…
Unassigned
J.P. Morgan Self-Directed Investing
J.P. Morgan's own AFFILIATES get paid fees for servicing J.P. Morgan-BRANDED mutual funds — the same funds sitting inside YOUR self-directed account.
Unassigned
JetBlue
JetBlue holds an ARC board seat, placing it inside the arrangement that sold passenger flight records to Customs and Border Protection under a…
Unassigned
John Marshall Bank
The 'scary' finding here is really about everyone ELSE: John Marshall explicitly promises it will NOT sell your mortgage to a third party…
Unassigned
KKR
Private equity ownership is the finding.
Unassigned
Kellanova
The snacks business separated from WK Kellogg in 2023 and subsequently acquired by Mars.
Unassigned
Kenvue
Nothing confirmed
Unassigned
Khan Academy (Khanmigo)
Nothing confirmed
Unassigned
Kia (Kia Connect / UVO)
Mozilla Foundation research ('Privacy Nightmare on Wheels') alleges Kia's privacy policy reserves the right to collect information about a driver's SEX LIFE…
Unassigned
Kimberly-Clark
Nothing confirmed
Unassigned
Kohl's
A third-party debt-collector breach (FBCS, 2024) is the finding, and it illustrates the structural point…
Unassigned
Korean Air
Nothing confirmed
Unassigned
Kroger
Two pharmacy-specific class actions is the detail that separates Kroger from other grocers in this tracker…
Unassigned
LPL Financial
LPL doesn't employ most of its advisors — they're INDEPENDENT businesses operating under their own names while LPL just custodies the money behind the scenes.
Unassigned
Land O'Lakes
A farmer-owned agricultural cooperative, so its primary relationships are with member producers rather than shoppers despite the retail dairy brand on the…
Unassigned
Leidos
Nothing consumer-facing confirmed this pass.
Unassigned
LendingTree
Multiple confirmed breaches across several years, and the repetition is the finding rather than any single incident.
Unassigned
Lennar
Lennar detected unauthorised access in 2023.
Unassigned
Letterboxd
Nothing confirmed
Unassigned
Libby / OverDrive
Nothing confirmed
Unassigned
Try fewer filters, or clear them all.