Investigations

Every investigation we've published, newest first — each one built on primary documents and classified under our evidence standard.

Topics Corporations·Government·Institutions·Public Figures·Fraud & Deception·Media
Fraud & Deception — 5 May 2026 — 7 min read

Drizly and Its CEO: A Data Breach That Exposed 2.5 Million Accounts Led to a Personal Consent Order Binding the Executive to Future Employers

After a preventable data breach exposed 2.5 million Drizly customer accounts, regulators issued a consent order against the company — and an unprecedented personal consent order against its CEO that will apply to any company he leads for the next twenty years, citing his failure to address known security vulnerabilities.

Read the full report
Fraud & Deception — 3 May 2026 — 7 min read

GoodRx: The Prescription Discount Platform That Shared Patient Health Data With Facebook and Google While Promising Privacy

GoodRx promised users it would never share their personal health information with advertisers — then used Facebook and Google advertising pixels to send detailed prescription search and fill data to those platforms, enabling targeted advertising campaigns based on users' medications and inferred medical conditions.

Read the full report