Advance America / Purpose Financial (Grupo Elektra)
Advance America (corporate name now Purpose Financial, LLC) has paid state regulators to resolve rate-evasion claims twice…
Unassigned
Companies
Every company record in the dataset, worst first. Rows marked unverified have not been checked against a primary source.
Results
Advance Auto Parts
The 2024 Snowflake-linked breach places Advance Auto Parts inside one of the largest cloud-credential incidents on record - a campaign that reached numerous…
Unassigned
Aflac
Aflac's initial breach report listed 500 affected people.
Unassigned
Air Canada
Two findings, and the second is the one with legs.
Unassigned
Air France
Air France sits on the board of ARC, the carrier-owned clearinghouse that sold US travelers' flight records to Customs and Border Protection under a contract…
Unassigned
AirAsia
The 2022 AirAsia breach was disclosed through the breach-news site DataBreaches.net, to which the attackers sent samples, rather than by AirAsia, and the…
Unassigned
Airbnb
Airbnb is already required by federal rule to show you the FULL price upfront, before checkout — which sounds reassuring until you realize this only happened…
Unassigned
Albert (Albert Corporation)
Albert agreed to a $5.2 million class settlement (pending final approval, Albert denies wrongdoing) in a federal suit alleging its 'Instant' advances are…
Unassigned
Ally Invest
By DEFAULT, Ally will hand your name, address, and exactly which STOCKS YOU PERSONALLY OWN to any outside company that requests it under an SEC rule…
Unassigned
Amazon Alexa
A federal judge ruled that TENS OF MILLIONS of Alexa users can sue Amazon as a group over allegations the device was designed to 'illegally and'…
Unassigned
American Express
Amex's structural position is different from Visa and Mastercard: it is both the network and the issuer, it charges the highest merchant fees in the market…
Unassigned
Amtrak
The April 2026 Amtrak breach was attributed to ShinyHunters - the same group behind the campaign documented as this tracker's biggest connective thread, which…
Unassigned
Amwell (American Well Corp.)
Amwell mostly sells telehealth technology to health plans and hospital systems, but it runs the consumer-facing LiveHealth Online service.
Unassigned
Ancestry (Ancestry.com / AncestryDNA)
Ancestry holds DNA from millions of customers and has been owned since December 2020 by private-equity firm Blackstone ($4.7 billion deal).
Unassigned
Apple Health Records (Apple Inc.)
The Health Records feature on iPhone and iPad lets you download your records directly from participating hospitals and clinics onto your phone.
Unassigned
Apple Music
Apple's overall privacy stance is generally stronger than most companies in this tracker, but no specific Apple Music consumer lawsuit was independently…
Unassigned
Arthur J. Gallagher
No new 2025-2026 matter confirmed this pass, but an earlier breach is documented.
Unassigned
Austrian Airlines
There is no Austrian Airlines-specific finding this pass, and the reason is itself the finding: Austrian is a Lufthansa Group airline, and group-wide systems…
Unassigned
AutoNation
AutoNation notified regulators that the CDK attack adversely affected its operations, and separately reached a $650,000 California consumer protection…
Unassigned
Avis Budget
Avis and Budget are one company, so brand choice is not data choice.
Unassigned
Best Buy
A 2026 lawsuit alleges Best Buy's own advertising arm allegedly builds customer profiles from purchases made in stores, online and through its app, and shares…
Unassigned
Best Western Hotels & Resorts
Best Western is a nonprofit owned by its member hotels — it once called itself a 'cooperative membership association' but dropped that label around 1985 after…
Unassigned
Betterment
Betterment's terms include explicit language stating that BOTH the customer AND Betterment are giving up their CONSTITUTIONAL right to sue in court…
Unassigned
BitMoji (Snap Inc.)
Bitmoji is Snap-owned, and the category worth flagging is that avatar creation from a selfie can involve facial analysis - the same category of technical…
Unassigned
Booking.com
European hoteliers have banded together to sue Booking.com — more than 10,000 European hotels were reportedly part of a collective action as of July 2026 over…
Unassigned
Booking.com (Booking Holdings)
The most effective scam in travel runs through Booking.com's own legitimate messaging channel: criminals compromise a hotel's partner account, then message…
Unassigned
Boston Scientific
MATERIAL 2026 CYBERSECURITY INCIDENT: on August 25, 2026 Boston Scientific identified unauthorized activity on its systems that caused a global network outage…
Unassigned
Bumble
Bumble's own 'women message first' feature — the entire premise of the app — was itself the SUBJECT OF A LAWSUIT alleging it discriminated against male users…
Unassigned
CACI International
Nothing consumer-facing confirmed this pass.
Unassigned
CLEAR (Clear Secure / Alclear)
CLEAR sells line-skipping at airport security in exchange for a paid, auto-renewing membership and your faceprint, fingerprints and iris scans.
Unassigned
CVS Health / CVS app
CVS Caremark (CVS's own pharmacy-benefits arm) is one of three companies the FTC accused of artificially inflating INSULIN prices through a rebate scheme…
Unassigned
Candy Crush / King (Microsoft-owned, via Activision Blizzard)
A putative class action filed in late September 2025 in a Los Angeles court by player Ruben Valenzuela (reported by Aftermath, Oct. 1, 2025) alleges…
Unassigned
CareFirst BlueCross BlueShield
Hackers got into CareFirst in June 2014 and were not detected for eleven months - and CareFirst only found them because it went looking after Anthem, Premera…
Unassigned
Carequality (The Sequoia Project)
Carequality isn't a database. It's a shared rulebook that lets EHR vendors and data networks such as Epic, Particle Health and Health Gorilla request patient…
Unassigned
Carvana
A reported 2026 tracking-technology claim (not independently confirmed) alleges Carvana installed unauthorised tracking on its site, and the online-only model…
Unassigned
CenterPoint Energy
Interval metering here produces the appliance-level detail the Naperville court found constitutionally significant.
Unassigned
Chain Bridge Bank
Chain Bridge Bank operates almost entirely as the go-to bank for POLITICAL COMMITTEES, PACs, and LOBBYING FIRMS nationwide…
Unassigned
Charter Spectrum
Charter was one of the six ISPs compelled to produce records under the FTC's 6(b) orders, so its residential practices were examined at a level of detail the…
Unassigned
Check 'n Go (Southwestern & Pacific Specialty Finance / CNG)
Check 'n Go's online privacy policy says the company reserves 'the right to share, rent, sell, or otherwise disclose' the information it collects 'with'…
Unassigned
Check Into Cash / Speedy Cash (CCF Holdings, now Katapult Holdings)
Check Into Cash and Speedy Cash now belong to CCF Holdings (CCFI), which became a subsidiary of Nasdaq-listed Katapult Holdings (KPLT) on August 11, 2026…
Unassigned
Chewy
Multiple separate findings including a Pennsylvania class action.
Unassigned
Chick-fil-A (One app)
Chick-fil-A's loyalty app accounts were compromised in 2023, and a resulting class action — reportedly accusing the company of an 'utter failure to implement'…
Unassigned
Chime
An IRAN-LINKED hacktivist group calling itself 'Team 313' allegedly breached Chime's servers on April 1, 2026, coinciding with an outage that, per plaintiffs…
Unassigned
Cigna Healthcare
A class action alleges that over a two-month stretch in 2022, Cigna medical directors used a system called PXDX to deny more than 300,000 claims at an average…
Unassigned
Citibank
Consumer-attorney sources describe Citi's mandatory arbitration clause as a RECURRING flashpoint specifically in DISPUTED AND UNAUTHORIZED TRANSACTION…
Unassigned
Citizens Financial
The April 2026 incident was attributed to a Russian ransomware group.
Unassigned
Coca-Cola
Coca-Cola disclosed a confirmed breach in July 2026 - very recent, with scope still developing as of this pass, so no figures are asserted here.
Unassigned
Cognizant Technology
Cognizant appears elsewhere in this tracker as a call-centre and IT services provider, and that is the row's substance…
Unassigned
Comcast Business
Same 2023 breach as residential Xfinity, documented in the Internet Providers tab - and the reason it deserves its own row is that the affected population is…
Unassigned
Comcast Xfinity
Comcast was one of six ISPs the FTC studied under compulsory 6(b) orders, and the report's findings are the row's substance…
Unassigned
Try fewer filters, or clear them all.