Loews
Diversified holding company whose insurance exposure runs through CNA.
Unassigned
Companies
Every company record in the dataset, worst first. Rows marked unverified have not been checked against a primary source.
Results
Loews Hotels & Co
Loews Hotels sits under Loews Corporation, the same parent that owns CNA Financial — so a guest checking into a Loews property and a business buying…
Unassigned
Lululemon athletica
The Lululemon app and membership programme collect workout data, class attendance and studio location alongside purchase history…
Unassigned
Lumen Technologies
Nothing consumer-facing confirmed this pass.
Unassigned
M&T Bank
M&T has reported that a third-party vendor was breached around August 2025 - the pattern that now dominates this tracker.
Unassigned
M1 Finance
M1 bundles investing, banking, AND lending into 'one' relationship — but that means when something goes wrong, which specific agreement actually governs your…
Unassigned
MEDITECH (Medical Information Technology, Inc.)
Nothing confirmed
Unassigned
MTA (NYC Subway/Bus)
OMNY generates trip-level location and timing records tied to whatever payment card or device tapped the reader, and that is a continuous log of a rider's…
Unassigned
Madabolic
Nothing confirmed
Unassigned
Mail.com
Nothing confirmed
Unassigned
Mail.ru
Named alongside Yandex in a purported credential dataset, and subject to the same Russian legal framework - data localisation requirements, SORM…
Unassigned
MainStreet Bank
Like several small community banks in this tracker, MainStreet's actual account/privacy terms are difficult for an outside researcher to find or verify…
Unassigned
Manpower
Nothing confirmed
Unassigned
Marco Polo
Nothing confirmed
Unassigned
Markel
Specialty and excess lines insurer with limited direct personal-lines exposure.
Unassigned
Mass Mutual
Duplicate of the MassMutual row in Life-Health-Dental - see that row for the Cigna vendor cross-reference, where a MassMutual benefit plan member's exposure…
Unassigned
MassMutual
MassMutual's exposure here did not come through MassMutual.
Unassigned
Mastercard
Co-defendant with Visa in the same twenty-one-year merchant antitrust case, subject to the same revised settlement, which received preliminary (not final)…
Unassigned
Mazda (Mazda Connected Services)
Mazda's arbitration terms are unusually FAIR — it pays your arbitrator fees, reimburses your attorney fees if you win, and won't come after your fees even if…
Unassigned
Medium
Nothing confirmed
Unassigned
Mercedes-Benz (Mercedes me connect)
Mercedes's in-cabin sensors reportedly monitor facial expressions, voice, and even MOOD — and some models have shipped with TikTok pre-installed, a direct…
Unassigned
Merck
Nothing confirmed
Unassigned
Merrill Edge (Bank of America)
Merrill Edge's parent, Bank of America, added FORCED ARBITRATION and a class-action waiver to its Deposit Agreement in 2026…
Unassigned
Meta AI (Llama)
Meta AI's Discover feed turned a share button into a publishing button: users' conversations about tax evasion, medical conditions, child custody, grief and…
Unassigned
Meta Horizon (VR)
VR headsets collect a category of data no other consumer device produces: eye tracking, hand and body motion, spatial mapping of the inside of your home, and…
Unassigned
Meta Messenger
Messenger's primary findings live in the Meta row in Consumer Apps, and the one that belongs here is the encryption timeline…
Unassigned
Micron Technology
Nothing consumer-facing confirmed this pass.
Unassigned
Microsoft (Copilot)
Microsoft 365 Copilot's contractual protection is genuinely one of the strongest in this tab - your tenant's prompts are excluded from foundation-model…
Unassigned
Microsoft Edge
Same reported (not re-verified here) roughly 2.2-million-user meeting-credential malware campaign as Chrome and Firefox - see Chrome row.
Unassigned
Microsoft OneDrive
No product-specific finding beyond Microsoft's overall framework.
Unassigned
Microsoft Word
No product-specific finding beyond Microsoft's overall framework.
Unassigned
Mixbook
Nothing confirmed
Unassigned
Mohawk Industries
Flooring manufacturer selling through retailers and contractors.
Unassigned
Molina Healthcare
Nothing confirmed
Unassigned
Moonshot AI (Kimi)
Kimi's privacy policy lists clipboard data among the categories it collects - the buffer that briefly holds whatever you last copied, which for most people…
Unassigned
Morgan Stanley / E*TRADE
If you opened your account with E*TRADE, you're now technically a Morgan Stanley customer — Morgan Stanley acquired E*TRADE in 2020, and legacy E*TRADE…
Unassigned
Motorola Solutions
Nothing consumer-facing confirmed this pass, and the honest entry here is more interesting than a null…
Unassigned
Murphy USA
Nothing confirmed
Unassigned
NOVEC (Northern Virginia Electric Cooperative)
Nothing confirmed
Unassigned
NPR
Nothing confirmed
Unassigned
NRG Energy
NRG owns Vivint Smart Home, whose $20 million FTC settlement over sales staff pulling unrelated people's credit files is documented in the Home Security &…
Unassigned
National Car Rental (Enterprise Holdings)
National is one of three Enterprise Holdings brands, and the group is privately held by the Taylor family…
Unassigned
Navy Federal Credit Union
Navy Federal is the single largest financial institution serving military-affiliated households in this entire region — and it is NOT insured by the FDIC.
Unassigned
Netsmart Technologies
Netsmart makes records software for behavioral health, addiction treatment, human services and post-acute care, so it holds some of the most sensitive records…
Unassigned
New York Life
New York Life discovered on December 2, 2025 that an unauthorized party had gotten into one of its AGENTS' email accounts - not a corporate database, not a…
Unassigned
NextEra Energy
Parent of Florida Power & Light and the largest renewable generator in the world.
Unassigned
Nextdoor
As of March 2026, plaintiffs' attorneys were advertising an investigation into whether Nextdoor shares users' LOCATION DATA with Microsoft for advertising…
Unassigned
Nissan (NissanConnect)
Independent research (Mozilla Foundation) names Nissan among automakers whose data collection extends into sensitive categories without clear driver consent…
Unassigned
Noom
Noom has been reported (not verified this pass) as named alongside other diet/weight-loss apps in independent research finding these apps share sensitive…
Unassigned
Nordstrom
Nothing confirmed
Unassigned
Try fewer filters, or clear them all.