Community Health Systems
CHS suffered a breach in which an unauthorized actor reportedly gained access on or around February 28, 2026, and the row is a reminder that this is a repeat…
Unassigned
Companies
Every company record in the dataset, worst first. Rows marked unverified have not been checked against a primary source.
Results
Costco
A 2023 class action brought by California plaintiffs alleges Costco's website shared customer activity with third parties in ways members did not agree to…
Unassigned
Credit Karma (Intuit)
The FTC found Credit Karma sent people emails saying 'Congrats!
Unassigned
Cricket Wireless (AT&T)
The 2024 Cricket exposure came through the same AT&T-related incidents documented in the Carriers tab, and the structural finding is the prepaid distinction…
Unassigned
Crypto.com
In January 2022 attackers took about $34 million in crypto from 483 Crypto.com customer accounts.
Unassigned
D.R. Horton
The principal finding is the Dec 2025 property-tax "bait-and-switch" class action and the arbitration-clause issues itemised below.
Unassigned
DaVita
The 2025 DaVita ransomware breach is among the largest healthcare incidents of that year, and the population affected makes it distinct…
Unassigned
Darden Restaurants (Olive Garden, LongHorn)
Darden operates Olive Garden, LongHorn, Cheddar's, Yard House, Ruth's Chris and others under one parent with shared loyalty infrastructure, so a diner…
Unassigned
Deere (John Deere)
The John Deere finding is not privacy but repair, and it is one of the sharpest ownership questions in this tracker…
Unassigned
Delmarva Power
Third of Exelon's three Mid-Atlantic utilities alongside Pepco and BGE, and the row exists mainly to prevent the impression that three separate assessments…
Unassigned
Dick's Sporting Goods
The 2024 incident was disclosed to the SEC (an Aug 2024 Form 8-K under Item 8.01, in which Dick's said it believed the incident was not material), which is…
Unassigned
Domino's
Domino's operates in the exact same delivery-fee-transparency landscape already documented for Uber Eats, DoorDash, Instacart, McDonald's, and Chick-fil-A…
Unassigned
Dropbox
A proposed class action alleges Dropbox failed to properly protect user data that was later exposed in a breach…
Unassigned
Early Warning Services (Zelle operator; bank-owned consumer reporting)
Early Warning Services is owned by seven of the largest U.S. banks.
Unassigned
Earnin (Activehours, Inc.)
Earnin disclosed a breach to the Texas Attorney General (with consumer notices going out around November 12, 2025) - and the disclosure route is the practical…
Unassigned
EchoStar (Dish Network)
The 2023 Dish breach is worth remembering for its operational shape: the ransomware attack took down customer service systems and the company's own websites…
Unassigned
Edward Jones
Because Edward Jones customers already sign a mandatory arbitration agreement at account opening, complaints against individual FINANCIAL ADVISORS…
Unassigned
Elevate Credit (RISE, Elastic)
CONFIRMED: In February 2022 Elevate Credit settled the DC Attorney General's 2020 'true lender' suit.
Unassigned
Eli Lilly
Nothing company-specific confirmed this pass on data privacy, but Lilly is the manufacturer whose product sits at the centre of the FTC PBM case documented in…
Unassigned
Emirates
Italy's Garante fined Emirates €180,000 in June 2026 - a real enforcement action, and a useful illustration of how little leverage a national regulator has…
Unassigned
Empower Retirement
The SEC charged Empower Advisory Group, and the category is worth naming precisely because retirement plan participants almost never think about it…
Unassigned
Erie Insurance
The 2025 cyber incident at Erie Indemnity (alleged by plaintiffs, but not confirmed by Erie, to be ransomware) had a contested outcome, and contested is the…
Unassigned
Etsy
A July 2025 proposed class action (White v. Etsy, N.D. Cal.; voluntarily dismissed by the plaintiff in Oct 2025) alleged Etsy let Google, Meta AND Microsoft…
Unassigned
Expedia
Expedia's Terms are described by consumer-legal guides as nearly identical in one-sidedness to Booking.com's (this same tab)…
Unassigned
Farmers Insurance Exchange
The confirmed 2025 breach reached Farmers Insurance Exchange and affiliated entities.
Unassigned
Fidelity Investments
Even Fidelity — the broker that markets itself as the customer-friendly, no-conflict choice by refusing payment-for-order-flow…
Unassigned
Fidelity National Information
FIS is the other half of the finding recorded in the Fiserv row: together they provide core processing, card issuing and digital banking infrastructure to a…
Unassigned
Finnair
Finnair's exposure came through SITA, an aviation IT provider most passengers have never heard of that processes frequent-flyer data for a large share of the…
Unassigned
FirstEnergy
FirstEnergy is the parent of Potomac Edison, which serves Maryland and West Virginia customers.
Unassigned
Ford (FordPass)
If you invite ANYONE to your FordPass account — a spouse, a teenager, a house-sitter borrowing the car for a week — they don't just get permission to drive.
Unassigned
Fortnite / Epic Games
Fortnite added an AI-powered Darth Vader chatbot NPC using voice lines mimicking James Earl Jones's iconic voice…
Unassigned
Fox Corporation
Confirmed (Fox FY2026 10-K): Fox's Tubi streaming service settled a Video Privacy Protection Act class action (final approval Jan. 24, 2025) and, on May 20…
Unassigned
Franklin Resources
Franklin Templeton's consumer relationship runs almost entirely through retirement plans, advisers and fund platforms rather than directly, so an investor's…
Unassigned
Frontier Airlines
Frontier disclosed a breach to the Vermont Attorney General on July 9, 2026 - very recent, and the disclosure route is the notable part.
Unassigned
Frontier Communications
Frontier's row was thin on prior passes, and the finding worth recording is jurisdictional rather than sensational…
Unassigned
Gaggle
Gaggle uses AI to scan students' school email, documents and files and flags possible self-harm, violence or explicit content to school staff.
Unassigned
Garmin
In July 2020 a WastedLocker ransomware attack - malware tied to the U.S.-sanctioned Evil Corp group - took Garmin Connect, the website, call centers…
Unassigned
GoGuardian
GoGuardian filters and monitors school-issued devices for a reported 27 million students in 11,500 schools, and its Beacon product flags students it considers…
Unassigned
Gold's Gym
Possible Mindbody vendor exposure (as with Life Time and CrossFit) and a place in the industry-wide TCPA pattern documented in the Orangetheory row…
Unassigned
Google / Alphabet
A 2025 lawsuit alleges Google's Chrome browser secretly builds a unique 'fingerprint' of CHILDREN specifically, one that keeps working even after a school…
Unassigned
Google Calendar
Same Google framework. Calendar is a category of data that is quietly more revealing than its contents suggest - meeting subjects, attendee lists, recurring…
Unassigned
Google Fiber (GFiber)
Google Fiber was one of the six ISPs subject to the FTC's compulsory 6(b) orders.
Unassigned
Google NotebookLM
One product-specific lawsuit is on record: in 2026 former NPR host David Greene sued Google alleging NotebookLM's AI podcast feature reproduced his…
Unassigned
Google Workspace for Education / Chromebooks
Google's school products put a large share of K-12 students into Google accounts, and the main dispute is over where the education suite ends and consumer…
Unassigned
Grab
Grab shows a repeat-offender pattern rather than a single incident - its GrabCar subsidiary was fined by Singapore's regulator, and repeat penalties are a…
Unassigned
Grammarly
Grammarly's 'Expert Review' feature (launched in beta in August 2025) offered AI-generated editing feedback explicitly attributed to REAL, NAMED journalists…
Unassigned
Group 1 Automotive
Activated cyber incident response procedures and disclosed CDK-related disruption to the SEC.
Unassigned
H&R Block
A class action filed against H&R Block, Meta, AND Google invokes the federal RICO Act — the law originally built to prosecute organized crime…
Unassigned
Hartford Insurance
The 2023 breach came through PBI Research Services, a vendor used across the life insurance and retirement industry to identify deceased policyholders and…
Unassigned
Health Gorilla
Health Gorilla is one of the ten federally designated QHINs and also runs a consumer 'Patient Access' service that lets individuals pull their own records…
Unassigned
Try fewer filters, or clear them all.