23andMe
When 23andMe went bankrupt in 2025, the genetic data of over 15 MILLION people — including people who have since DIED, whose DNA records remain active in the…
Unassigned
Companies
Company records matching your filters, worst first. Rows marked unverified have not been checked against a primary source.
Results
Amazon
The FTC alleged Amazon used confusing checkout screens to sign millions of people up for Prime WITHOUT clear consent, then made it deliberately hard to cancel…
Unassigned
Amazon Prime Video
Prime Video is bundled under the same Amazon Prime membership the FTC secured a $2.5 BILLION settlement over…
Unassigned
Cash App (Block, Inc.)
The CFPB ordered Cash App's parent company to pay UP TO $120 MILLION back to defrauded customers plus a separate $55 MILLION penalty, finding Cash App failed…
Unassigned
Google Maps
Google Maps' location data is part of the same Google data ecosystem as the $1.375 billion Texas settlement…
Unassigned
Grindr
Grindr is the clearest case in this tracker of an app whose mere use reveals sensitive data: Norway's data protection authority held that sharing Grindr…
Unassigned
Hinge (Match Group)
In January 2026, the same ShinyHunters group that hit Panera, Amtrak, and dozens of others (documented throughout this tracker) breached Hinge, Match, and…
Unassigned
Klarna / Afterpay / Affirm (Buy Now, Pay Later apps)
A 2025 LendingTree survey found 41% of Buy Now Pay Later users paid late at least once in the prior year, up from 34% the year before.
Unassigned
Life360
Arity reportedly paid app makers (Life360 among the apps named) millions of dollars in total to embed Allstate subsidiary Arity's tracking software inside its…
Unassigned
Marriott (Bonvoy)
Marriott's combined litigation — the 2018 breach, a separate 2020 breach, resort-fee deception, and biometric employee timekeeping violations…
Unassigned
Meta (Facebook / Instagram / WhatsApp)
Meta has told hundreds of millions of WhatsApp users their messages are 'end-to-end encrypted' — meaning not even Meta can read them.
Unassigned
Mint (Intuit)
Mint shares Intuit's corporate family with TurboTax ($141M multistate attorneys-general settlement over 'free' filing deception) and Credit Karma…
Unassigned
MyFitnessPal
MyFitnessPal's cookie-consent banner offers you a button to browse 'without being tracked' — a 2025 lawsuit…
Unassigned
Nest (Google)
Google DISABLES its Nest 'Familiar Faces' facial-recognition feature specifically in Illinois — the one state with a strong biometric consent law…
Unassigned
Peacock (NBCUniversal/Comcast)
Peacock's parent Comcast separately agreed to pay $117.5 MILLION to settle a 2023 data breach affecting 35.8 million Xfinity customers…
Unassigned
Reddit's lawsuit against Perplexity and data-scraping firms (Oct. 2025) describes their scraping as 'industrial-scale' and unlawful, and its chief legal…
Unassigned
Target
Target's landmark 2013 breach — 41 million payment card accounts, contact information for 60 million-plus customers, entered through a THIRD-PARTY HVAC…
Unassigned
Threads (Meta)
Threads runs on the exact same underlying Meta infrastructure and data practices already documented for Facebook/Instagram elsewhere in this tracker…
Unassigned
Walgreens app
Walgreens announced in November 2022 settlement frameworks to resolve state, local and tribal opioid claims for up to approximately $4.8 billion…
Unassigned
X (Twitter)
Right now, by DEFAULT, X shares your public posts AND your private conversations with its own AI chatbot Grok with xAI, to train and improve Grok's models…
Unassigned
Zelle
Customers of Chase, Bank of America, and Wells Fargo lost more than $870 MILLION to Zelle fraud over the network's seven-year history, according to the CFPB's…
Unassigned
ADT
ADT — a company literally in the business of protecting people's homes — has disclosed THREE DATA BREACHES SINCE AUGUST 2024…
Unassigned
American Airlines
American Airlines is one of the four carriers named in the price-fixing conspiracy allegation.
Unassigned
Delta Air Lines
A May 2026 lawsuit alleges Delta's own platform values a CASH REFUND at TWICE the value of an e-credit…
Unassigned
Discord
By 2026 Discord faced state lawsuits from New Jersey (filed April 2025), Nevada, Texas and others alleging its private servers and direct messages remain…
Unassigned
Disney+ / Hulu (Disney)
California's Attorney General secured a $2.75 MILLION penalty against Disney (Feb 2026) specifically for FAILING TO HONOR customers' own opt-out requests…
Unassigned
DoorDash
New York's AG found DoorDash was using customer TIPS to SUBSIDIZE delivery workers' base pay instead of paying tips on top of guaranteed wages…
Unassigned
GoodRx / BetterHelp / Premom (health app category)
BetterHelp asks new users to answer intake questions about anxiety, depression, medication history, and emotional struggles…
Unassigned
OkCupid (Match Group)
OkCupid was named in the SAME January 2026 breach as Hinge and Match (an alleged 10+ million records, an unverified claim)…
Unassigned
PlayStation Network (Sony)
A class action (Caccuri v. Sony Interactive Entertainment, No. 21-cv-03361) alleged Sony unlawfully stopped third-party retailers from selling PlayStation…
Unassigned
Postmates (Uber)
Postmates is owned by Uber, not DoorDash (Uber completed its acquisition on Dec. 1, 2020) — so DoorDash's $16.75 million NY AG settlement over using customer…
Unassigned
Ring (Amazon)
Ring's new 'Familiar Faces' feature (launched Dec 2025) uses AI facial recognition to build a database of up to 50 people per household…
Unassigned
Seamless (Grubhub)
Seamless runs on Grubhub's infrastructure, meaning Grubhub's own $25 million FTC settlement over deceptive fees and subscription practices applies to the same…
Unassigned
Southwest Airlines
The US government actually FILED a lawsuit against Southwest for illegally operating 'chronically delayed' flights on two specific routes…
Unassigned
Starbucks
A Los Angeles County jury awarded a delivery driver $50 MILLION (March 2025) after a venti hot tea that, his lawyers said, a barista failed to secure fell…
Unassigned
United Airlines
United's marketing around 'sustainable aviation fuel' was challenged as GREENWASHING in a class action…
Unassigned
Xbox (Microsoft)
Microsoft's $20 million COPPA fine for collecting children's data on Xbox Live without parental consent worked out to roughly 0.04% of Microsoft's $56.2…
Unassigned
YouTube (Google/Alphabet)
Same quiet-settlement pattern as TikTok and Snapchat (this same tab): Google reached a CONFIDENTIAL settlement with a Florida teenager who alleged depression…
Unassigned
Zoom
Zoom agreed to pay $85 MILLION to settle class claims that it shared certain user information with third parties (reportedly including Facebook and Google)…
Unassigned
Airbnb
Airbnb is already required by federal rule to show you the FULL price upfront, before checkout — which sounds reassuring until you realize this only happened…
Unassigned
Amazon Alexa
A federal judge ruled that TENS OF MILLIONS of Alexa users can sue Amazon as a group over allegations the device was designed to 'illegally and'…
Unassigned
Apple Music
Apple's overall privacy stance is generally stronger than most companies in this tracker, but no specific Apple Music consumer lawsuit was independently…
Unassigned
Best Buy
A 2026 lawsuit alleges Best Buy's own advertising arm allegedly builds customer profiles from purchases made in stores, online and through its app, and shares…
Unassigned
Booking.com
European hoteliers have banded together to sue Booking.com — more than 10,000 European hotels were reportedly part of a collective action as of July 2026 over…
Unassigned
Bumble
Bumble's own 'women message first' feature — the entire premise of the app — was itself the SUBJECT OF A LAWSUIT alleging it discriminated against male users…
Unassigned
CVS Health / CVS app
CVS Caremark (CVS's own pharmacy-benefits arm) is one of three companies the FTC accused of artificially inflating INSULIN prices through a rebate scheme…
Unassigned
Candy Crush / King (Microsoft-owned, via Activision Blizzard)
A putative class action filed in late September 2025 in a Los Angeles court by player Ruben Valenzuela (reported by Aftermath, Oct. 1, 2025) alleges…
Unassigned
Chick-fil-A (One app)
Chick-fil-A's loyalty app accounts were compromised in 2023, and a resulting class action — reportedly accusing the company of an 'utter failure to implement'…
Unassigned
Chime
An IRAN-LINKED hacktivist group calling itself 'Team 313' allegedly breached Chime's servers on April 1, 2026, coinciding with an outage that, per plaintiffs…
Unassigned
Credit Karma (Intuit)
The FTC found Credit Karma sent people emails saying 'Congrats!
Unassigned
Try fewer filters, or clear them all.