Wizz Air
The claimed 2025 breach has never been independently confirmed by Wizz Air, and that is the honest state of this row - an attacker assertion, not an…
Unassigned
Companies
Every company record in the dataset, worst first. Rows marked unverified have not been checked against a primary source.
Results
Workday
Workday's 2025 breach came through the ShinyHunters social-engineering campaign - employees were phoned by people posing as IT or HR staff and talked into…
Unassigned
Xcel Energy
Upper Midwest and Colorado utility. Xcel's equipment was implicated in the Marshall Fire investigation in Colorado, producing extensive litigation from…
Unassigned
Xfinity Mobile (Comcast)
In O'Neil v. Comcast Corp., No. 18-cv-04249 (N.D. Ill. Feb. 27, 2019), an existing Xfinity internet customer who had not used the 30-day opt-out alleged…
Unassigned
Yandex Mail
Yandex disclosed in 2021 that an EMPLOYEE with privileged access had been providing unauthorised access to user mailboxes - an insider incident rather than an…
Unassigned
Yelp
Yelp's entire business model runs on location data and behavioral profiling of where you go and what you think of it…
Unassigned
Yum Brands (KFC, Taco Bell, Pizza Hut)
The January 2023 ransomware attack forced Yum to close nearly 300 UK restaurants for a day, and the company later disclosed that employee data had been…
Unassigned
Yum China (KFC/Pizza Hut China)
Nothing confirmed this pass in this pass's searching, and this row should be treated as unexamined rather than clean…
Unassigned
Zappos (Amazon)
A proposed class action filed December 9, 2025 in federal court in California (McFarlane v. Zappos.com LLC) alleges, under federal and state wiretapping laws…
Unassigned
Zillow
The June 2024 VPPA and CIPA class action (voluntarily dismissed without prejudice in Sept 2025) alleged Zillow's video content brought it within the Video…
Unassigned
athenahealth
In January 2021 athenahealth agreed to pay $18.25 million to resolve allegations that it paid illegal kickbacks to sell its EHR.
Unassigned
eBay
eBay's security team once tormented a couple who publicly criticized the company — sending them live spiders, a bloody pig mask, and funeral wreaths, among…
Unassigned
easyJet
Roughly nine million customers had data exposed, including credit card details for a subset, and the group claim that followed asserted potential damages of…
Unassigned
iRobot
A Roomba maps your home, and some models carry cameras.
Unassigned
xAI (Grok)
In August 2025, Forbes found more than 370,000 private Grok conversations sitting in Google's search index - medical and psychological questions, business…
Unassigned
AAA (American Automobile Association)
Nothing confirmed
Unassigned
ADP
Duplicate of the ADP row in Payroll, RealEstate & Finance - see that row for the full analysis.
Unassigned
ADP
Nothing confirmed
Unassigned
ANA (All Nippon Airways)
Nothing confirmed
Unassigned
AbbVie
Nothing confirmed
Unassigned
Accor
Accor is the one major hotel group in this tab whose parent sits inside the EU, which means a guest's data is governed by GDPR at the controller level and…
Unassigned
Ace Hardware
Ace is a retailer-owned cooperative of roughly 5,700 independently owned stores, which means the loyalty and purchase data behind an Ace Rewards card sits…
Unassigned
Acorns
Under Acorns' website Terms of Use (which the investment-account agreements' FINRA clause supersedes for account holders), even if you WIN your arbitration…
Unassigned
Adobe Scan
Adobe's June 2024 Terms of Use update produced significant public backlash when users read the terms as granting Adobe broad rights to access and analyse…
Unassigned
AdvancedMD
Nothing confirmed
Unassigned
Aeroflot
The 2025 cyberattack on Russia's flag carrier (July 28, 2025) was claimed by hacktivist groups Silent Crow and Belarus Cyber-Partisans, who said they had a…
Unassigned
Air China
Nothing confirmed
Unassigned
Airalo
Nothing confirmed
Unassigned
Airbnb
Airbnb is the only lodging row here where the person holding your data is another private individual.
Unassigned
Alamo Rent A Car (Enterprise Holdings)
Alamo's leisure and inbound-tourism focus creates a specific and underexamined gap: a European renter arriving on holiday hands over a passport and driving…
Unassigned
Alaska Airlines
Alaska sits on the ARC board - the airline-owned clearinghouse that sold US travelers' domestic flight records, including names, itineraries and financial…
Unassigned
Albertsons
Duplicate of the Safeway row in Car Rental & Grocery-Restaurant - see that row for the full analysis.
Unassigned
Altera Digital Health (formerly Allscripts hospital business)
Nothing confirmed
Unassigned
Altice USA (Optimum, fmr. Suddenlink)
See the Optimum row in Internet Providers for the primary analysis.
Unassigned
Altria
Nothing confirmed
Unassigned
Ameren
Nothing confirmed
Unassigned
American Electric Power
Nothing confirmed
Unassigned
American Family Insurance
Nothing confirmed
Unassigned
American Financial
American Financial Group writes specialty property and casualty insurance through Great American Insurance.
Unassigned
American Home Shield (Frontdoor Inc.)
The reported law-firm investigation into alleged website tracking (no filed case located; status not verified as of Oct 2026) is worth pairing with what a…
Unassigned
Ameriprise Financial
Nothing confirmed
Unassigned
Amgen
Nothing confirmed
Unassigned
Anytime Fitness
Nothing confirmed
Unassigned
Apartments.com
Nothing confirmed
Unassigned
Apollo Global Management
Private equity firm that owns Athene, a large annuity provider — meaning retirement savers hold guaranteed-income products issued by an insurer owned by an…
Unassigned
Appalachian Power (American Electric Power)
Nothing confirmed
Unassigned
Apple Journal
Nothing confirmed
Unassigned
Apple Pages
Nothing confirmed
Unassigned
Apple Store (online)
Nothing confirmed
Unassigned
Apple Voice Memos
Nothing confirmed
Unassigned
Try fewer filters, or clear them all.