Basic Search
|
Summaries
|
Advanced Search
Violation Tracker Summary for Mega-Scandal
Mega-Scandal: Data Breach Liability
Description: This list shows cases in which companies paid penalties of $25 million or morein connection with data breaches.
Penalty Total since 2000: $2,241,357,939
Number of Penalty Records: 15
Note: The totals here are adjusted to account for the fact that each current parent's entries may include both agency records and settlement announcements for the same case; or else a penalty covering multiple locations may be listed in the individual records for each of the facilities. They are also adjusted to reflect cases in which federal and state or local agencies cooperated and issued separate announcements of the outcome. Duplicate or overlapping penalty amounts are marked with an asterisk in the individual records list below.
| Top 10 Current Parent Companies | Total Penalty $ | Number of Records |
| Equifax | $1,080,500,000 | 3 |
| T-Mobile US | $350,000,000 | 1 |
| Elevance Health | $154,500,000 | 2 |
| Uber Technologies | $148,000,000 | 1 |
| Apollo Global Management | $117,500,000 | 1 |
| Amazon.com | $95,000,000 | 1 |
| Capital One Financial | $95,000,000 | 1 |
| Marriott International | $52,000,000 | 1 |
| Blackbaud | $49,500,000 | 1 |
| Target | $39,357,939 | 1 |
Individual Penalty Records:
Click on the company or penalty amount for more information on each case. Click on the current parent name to reach the summary page for that parent company.
| Company | Current Parent | Current Parent Industry | Primary Offense Type | Year | Agency | Penalty Amount  |
| Equifax | Equifax | miscellaneous services | consumer protection violation | 2019 | CFPB | $525,000,000 |
| Equifax Inc. | Equifax | miscellaneous services | privacy violation | 2020 | private lawsuit-federal | $380,500,000 |
| T-Mobile | T-Mobile US | telecommunications | privacy violation | 2023 | private lawsuit-federal | $350,000,000 |
| Equifax | Equifax | miscellaneous services | privacy violation | 2019 | MULTI-AG | $175,000,000 |
| Uber Technologies | Uber Technologies | miscellaneous services | privacy violation | 2018 | MULTI-AG | $148,000,000 |
| Yahoo Inc. | Apollo Global Management | private equity (including portfolio companies) | privacy violation | 2020 | private lawsuit-federal | $117,500,000 |
| Anthem, Inc. | Elevance Health | healthcare services | privacy violation | 2018 | private lawsuit-federal | $115,000,000 |
| Capital One Bank | Capital One Financial | financial services | privacy violation | 2022 | private lawsuit-federal | $95,000,000 |
| Amazon.com | Amazon.com | retailing | privacy violation | 2022 | private lawsuit-federal | $95,000,000 |
| Marriott International, Inc. | Marriott International | hotels | privacy violation | 2024 | MULTI-AG | $52,000,000 |
| Blackbaud Inc. | Blackbaud | information technology | privacy violation | 2023 | MULTI-AG | $49,500,000 |
| Anthem Inc. | Elevance Health | healthcare services | privacy violation | 2020 | MULTI-AG | $39,500,000 |
| Target Corporation | Target | retailing | privacy violation | 2016 | private lawsuit-federal | $39,357,939 |
| Altaba Inc. | | | investor protection violation | 2018 | SEC | $35,000,000 |
| Home Depot, Inc. | Home Depot | retailing | privacy violation | 2020 | private lawsuit-federal | $25,000,000 |
