Productivity & Comms Apps · Web Browser · Data breach
Mozilla Firefox
Headline
Firefox was among the 2.2 million browser users caught in the meeting-credential malware campaign alongside Chrome and Edge, which is worth recording precisely because Firefox is the browser people choose FOR privacy…
Firefox was among the 2.2 million browser users caught in the meeting-credential malware campaign alongside Chrome and Edge, which is worth recording precisely because Firefox is the browser people choose FOR privacy reasons. Mozilla's structure is genuinely different - a non-profit foundation with a for-profit subsidiary, no advertising business of the scale that shapes Chrome's incentives - and that difference is real. But a malicious extension or a compromised download runs in Firefox exactly as it runs anywhere else. Choosing a privacy-respecting vendor addresses what the VENDOR does with your data and does nothing about what an attacker does.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-08-04
Primary source. www.bleepingcomputer.com/news/security/zoom-stealer-browser-extensions-harvest-corporate-meeting-intelligence/ — Verified - primary source confirmed.
Terms
Arbitration
Not independently confirmed this pass — standard binding arbitration + class action waiver expected for Mozilla's own services.
Data sharing
Firefox was among the 2.2 million browser users (alongside Chrome and Edge) affected by a Dec 2025 meeting-credential-stealing malware campaign (see Chrome row) — a shared, cross-browser incident rather than Firefox-specific. Mozilla (a nonprofit foundation) is generally positioned as more privacy-protective than Chrome/Edge, with default tracker-blocking and no direct advertising-revenue dependence on Firefox itself, though Mozilla DOES receive substantial revenue from a default-search-engine deal with Google.
Fees and billing
Not itemized this pass.
Contacts
Privacy contact. Not recorded.
Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.
Mailing address. Not recorded.
Evidence
| Claim | Kind | Support | Sources |
|---|---|---|---|
| 1. Firefox users were among the 2.2 million browser users caught in the campaign alongside Chrome and Edge. | fact | supported | none recorded |
| 2. The campaign was a meeting-credential campaign. | fact | contradicted | none recorded |
| 3. This is worth recording because Firefox is the browser people choose for privacy reasons. | characterization | n/a | none recorded |
| 4. Mozilla is a non-profit foundation with a for-profit subsidiary. | fact | unsupported | none recorded |
| 5. Mozilla has no advertising business of the scale that shapes Chrome's incentives. | fact | unknown | none recorded |
| 6. A malicious extension or compromised download runs in Firefox exactly as anywhere else. | characterization | n/a | none recorded |
| 7. Choosing a privacy-respecting vendor addresses what the vendor does, not what an attacker does. | characterization | n/a | none recorded |
0 of 7 claims have a confirmed source of their own.
No sources are on file for this row yet.
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy mozilla.org/en-US/privacy/firefox/ | Not fetched yet | NO (HTML only) |
| Terms of service mozilla.org/en-US/about/legal/terms/mozilla/ | Not fetched yet | NO (HTML only) |
| Website No URL recorded | Not fetched yet | — |
| Primary source https://www.bleepingcomputer.com/news/security/zoom-stealer-browser-extensions-harvest-corporate-meeting-intelligence/ Verification: Verified - primary source confirmed | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No HQ state on file, so no state statute applies by headquarters.