1,634 enforcement actions from 16 federal and state jurisdictions. Every event traced back to its official government source.
1,634
Total Actions
16
Jurisdictions
$49.9B+
Total Fines Tracked
New York Attorney General Letitia James issued an industry alert urging workers with knowledge of unsafe or illegal conduct in AI development to file confidential complaints through the OAG's secure whistleblower portal. The alert cites the OAG's monitoring of cybersecurity, economic, and other safety risks from emerging AI, and highlights the RAISE Act (effective January 1, 2027), which will require large AI developers to publicly disclose safety measures and report security incidents, as well as the SHIELD Act's data security requirements. No company was named, charged, or penalized; the alert signals impending OAG enforcement authority over AI developers.
New York Attorney General Letitia James, leading a bipartisan coalition of 39 other states, the District of Columbia, and Hawaii's Office of Consumer Protection, secured a $700 million settlement from Credit Acceptance Corporation (CAC), a subprime auto lender, resolving allegations of deceptive and abusive lending. The lawsuit alleged CAC pushed tens of thousands of consumers into unaffordable loans with average interest rates above 38 percent, bundled with expensive add-on products consumers were told were mandatory or never told about, causing widespread defaults and vehicle repossessions. Note: this is a consumer-lending enforcement action rather than a privacy matter, so no privacy violation categories from the taxonomy apply.
$700.0M
Colorado and 40 other states entered into a settlement with Credit Acceptance Corporation (CAC), one of the nation's largest subprime auto lenders, resolving allegations that CAC originated car loans it knew or should have known consumers could not afford and that it failed to reasonably prevent dealers in its network from deceptively 'packing' Vehicle Service Contract and GAP add-on products into CAC-financed purchases. The settlement provides $694 million in cash and debt relief to consumers plus an additional $15 million to the attorneys general, and imposes injunctive reforms including loan 'off ramps,' enhanced pre-purchase and pre-loan disclosures, dealer monitoring, and a seven-year price cap at 109% of retail book value. Note: this is a consumer-lending enforcement action, not a data privacy matter; the 'dark_patterns' category is the closest available fit for the deceptive add-on sales allegations.
$694.0M
Colorado Attorney General Phil Weiser announced a settlement with Sares Regis Group, a Denver-metro property management company, after an investigation found it told prospective tenants that rental subsidies and housing vouchers were not accepted at its properties, in violation of the Colorado Anti-Discrimination Act and the Colorado Consumer Protection Act. Under the settlement, the company must adopt written source-of-income policies, train leasing employees, submit a compliance report to the AG's office, and refrain from misrepresenting its voucher acceptance, and it pays $30,000 to the Housing Rights Initiative. Note: this is a fair-housing enforcement action, not a privacy matter, so no privacy violation taxonomy categories apply.
$30K
New Jersey's Attorney General and Division of Consumer Affairs, along with 41 Attorneys General, reached a $694 million settlement with subprime auto lender Credit Acceptance Corporation over allegations it originated unaffordable loans its own systems predicted borrowers could not repay, employed aggressive debt-collection tactics, and failed to prevent deceptive vehicle-service contract and GAP product 'packing' by dealers. The multistate settlement stepped in after the CFPB permanently dropped its 2023 enforcement action against CAC in 2025. CAC will provide $60 million in cash restitution, $634 million in debt relief, an additional $15 million to the states, and implement injunctive lending reforms including loan off ramps, pre-loan disclosures, add-on packing safeguards, and a seven-year vehicle price cap. Note: this is a consumer-protection lending enforcement action, not a privacy matter; violation categories are best-fit mappings from the available taxonomy.
$694.0M
Virginia and 40 other state attorneys general settled with subprime auto lender Credit Acceptance Corporation (CAC) for $694 million in cash restitution and debt relief. The settlement resolves allegations that CAC originated loans it knew or should have known consumers could not afford, and that it encouraged and failed to prevent dealers from unlawfully 'packing' auto-loan contracts with unwanted Vehicle Service Contracts and GAP products. The Consent Judgment was filed September 17, 2026, with the City of Richmond Circuit Court.
$694.0M
Virginia Attorney General Jay Jones announced that Governor Spanberger's declaration of a state of emergency due to prolonged, severe drought has triggered Virginia's anti-price gouging statutes, making it unlawful to charge unconscionable prices for necessary goods and services. A price is unconscionable if it grossly exceeds the price charged during the ten days immediately prior to the emergency. No entity was charged or fined; the release is a consumer advisory explaining how to report suspected price gouging to the Attorney General's Consumer Protection Section.
Minnesota AG Keith Ellison and a bipartisan coalition of 41 state attorneys general reached a settlement with subprime auto lender Credit Acceptance Corporation requiring it to pay the states $75.5 million and forgive more than $630 million in consumer debt nationwide. The settlement resolves allegations that the company financed auto loans it knew or should have known consumers could not afford, and financed the sale of expensive add-on products that consumers did not know they were purchasing. The company must also fundamentally reform its lending practices, including risk disclosures, loan balance waivers for high-risk defaults, and enhanced consent and cancellation protections for add-on products.
$75.5M
Oregon Attorney General Dan Rayfield announced a $694 million multistate settlement with Credit Acceptance Corporation (CAC), a subprime auto lender, resolving allegations that CAC originated unaffordable loans and allowed dealers to 'pack' unwanted Vehicle Service Contracts and Guaranteed Asset Protection products into consumer loans. The settlement provides $60 million in cash restitution, $634 million in debt relief, and injunctive reforms including off ramps for risky loans, enhanced disclosures, and dealer monitoring.
$694.0M
Connecticut Attorney General William Tong joined 40 other state attorneys general in a settlement with Credit Acceptance Corporation (CAC), one of the nation's largest subprime auto lenders, resolving allegations that CAC originated loans it knew or should have known consumers could not afford and encouraged or failed to prevent dealers from 'packing' CAC loans with unwanted Vehicle Service Contract (VSC) and GAP products. The settlement, announced September 17, 2026 and effective November 2, 2026, directs $694 million in cash restitution and debt relief to consumers, plus an additional $15 million to the states, and imposes injunctive lending reforms. Note: this is a consumer-protection/lending enforcement action rather than a data privacy matter; the violation categories are best-fit mappings to the available taxonomy.
$694.0M
New York Attorney General Letitia James secured a settlement with two Mt. Kisco car dealerships, DARCARS Lexus and DARCARS BMW, that deceptively charged a two percent 'sales commission' fee that was optional, provided no consumer benefit, and was never paid to the salesperson, and that misleadingly bundled a low-value aftermarket product ('DARCARS Assurance') into sales and lease agreements as if it were mandatory. The dealerships will pay more than $1.17 million in consumer refunds (with potentially millions more through a claims process) plus $700,000 in penalties. They must clearly disclose all future fees and add-ons, are banned from selling DARCARS Assurance or similar junk bundles at any New York dealership, and must conduct annual fair-business-practices training for all employees.
$700K
Colorado Attorney General Phil Weiser announced a settlement with Corporate Certificates, LLC and FL UCC Statement Service, LLC resolving allegations that the companies mailed marketing materials to Colorado businesses designed to look like official government invoices, without the statutorily required disclaimers and with purported deadlines implying a legal duty. Under the stipulated consent judgment, the companies will pay $150,000 in refunds and fees and permanently cease all operations in Colorado. The companies had ignored prior warning notices and stopped operating in Colorado in August 2025 after the AG obtained a preliminary injunction.
$150K
Connecticut Attorney General William Tong issued an advisory that newly enacted privacy laws take effect October 1, 2026, including Public Act 26-64 (SB4), which amends the Connecticut Data Privacy Act, and Public Act 26-15 (SB5), which established the Connecticut Artificial Intelligence Responsibility and Transparency Act (CART Act). The new laws regulate surveillance pricing, facial recognition technology, genetic data collected by direct-to-consumer testing companies, a ban on the sale of precise geolocation data, a data broker registry, AI use in employment decisions, and chatbots offered to children. No enforcement action was taken; this is prospective guidance alerting consumers and businesses to new rights and compliance requirements.
FTC staff published FAQs on price transparency to help the automobile industry comply with the FTC Act, reiterating that an advertised vehicle price must be the actual price any consumer can pay, excluding only government-required charges. The guidance follows warning letters the FTC sent to 97 auto dealership groups earlier in 2026 and signals continued litigation against dealers that advertise one price but charge more through undisclosed fees. No specific entity was charged and no penalty was imposed.
New York Attorney General Letitia James led a bipartisan coalition of 17 other state attorneys general in sending a letter to Congress opposing the Digital Asset Market Clarity Act, warning that the bill would preempt state attorneys general authority to combat cryptocurrency fraud and scams. This is a legislative advocacy action, not an enforcement action against any company, and no penalties or remedies were imposed. The coalition urged Congress to preserve state enforcement power over both tokenized and non-tokenized securities and state crypto registration regimes.
Connecticut joined 39 other states and the federal government in a $384 million False Claims Act settlement with Abbott Laboratories over allegations that the company failed to manufacture powder infant formula and nutritional therapy products in compliance with federal and state requirements at its Sturgis, Michigan, and Casa Grande, Arizona facilities. Abbott allegedly manufactured formula in conditions that risked microorganism contamination and failed to disclose contamination test results to the FDA during 2019 and 2022 inspections. The settlement resolves claims that Abbott caused false claims to be submitted to the WIC program and state Medicaid programs between January 1, 2018, and December 31, 2022.
$384.2M
Connecticut Attorney General William Tong joined a bipartisan coalition of 16 other state attorneys general in sending a letter to the U.S. Senate Banking Committee opposing the Digital Asset Market Clarity Act, warning it would preempt state authority to protect investors from cryptocurrency fraud and scams. The coalition urges Congress to preserve state enforcement, registration, and federal-state cooperation roles over digital assets. This is a legislative advocacy action, not an enforcement action — no entity was charged, no violations were found, and no penalty was imposed.
Abbott Laboratories agreed to pay more than $384 million — including $977,558 to Oregon — to resolve allegations that it sold powder infant formula and nutritional therapy products made in unsafe manufacturing conditions to Medicaid and food assistance programs such as WIC between January 2018 and December 2022. Investigators found Abbott failed to maintain manufacturing equipment and control water at its Sturgis, Michigan, and Casa Grande, Arizona, facilities, and withheld test results showing contamination during FDA inspections in 2019 and 2022. The settlement was negotiated by the National Association of Medicaid Fraud Control Units on behalf of the federal government and 39 states.
$384.2M
Minnesota Attorney General Keith Ellison joined a bipartisan coalition of 16 attorneys general in a letter to U.S. Senate Banking Committee leaders opposing the Digital Asset Market Clarity Act, warning it would strip states of their ability to combat cryptocurrency scams and fraud. The letter cites over $10 million in crypto scam losses by Minnesotans in 18 months and urges Congress to preserve state registration regimes and enforcement authority. No company was charged and no penalty was imposed; this is legislative advocacy rather than an enforcement action.
Colorado Attorney General Phil Weiser announced a $152,000 settlement with smoke shop owners Sahansila Karki and Gokul Tiwari for selling kratom products that exceeded the legal potency limit and failed to meet labeling and packaging requirements. The settlement requires compliance with the Colorado Consumer Protection Act and the Daniel Bregger Act, product testing, documentation of purchases, and payment of $152,000, with an additional $500,000 due if the terms are violated.
$152K
A Texas state district court (Judge Cory Liu) has found TikTok liable for lying to parents about the safety of its platform and for exposing children to inappropriate and explicit content, making Texas the first state in the nation to hold TikTok liable on these claims. The court found that although TikTok claimed it would remove graphic videos depicting drugs, nudity, alcohol, injuries, and profanity, such videos remained accessible to minors, even under 'Restricted Mode.' No penalty has been imposed yet; Attorney General Paxton will proceed to trial, expected next month, where relief and penalties will be determined.
Virginia Attorney General Jay Jones, joined by a bipartisan coalition of 48 other attorneys general, sent a letter urging the FCC to strengthen its 'Know Your Upstream Provider' (KYUP) rules to keep illegal robocalls off the U.S. phone network. The coalition asks the FCC to mandate baseline vetting measures for upstream providers, add monitoring triggers, strengthen STIR/SHAKEN caller ID authentication, establish base penalties, and require retention of KYUP data. No company was fined in this action; it is regulatory advocacy that builds on the Anti-Robocall Multistate Litigation Task Force's Operation Robocall Roundup, which sent warning letters to 37 voice providers.
Minnesota Attorney General Ellison reached a settlement with Minnesota Valley Cooperative Light and Power Association resolving allegations of deceptive and unfair practices, including disconnecting a customer's electricity despite the customer's need for life-sustaining medical equipment and failing to properly notify customers of consumer protections or offer appropriate payment plans. Under the consent judgment, the cooperative must provide separate disconnection notices, offer written payment plans, maintain records for AG oversight, and forgive amounts owed by the affected consumer.
The FTC rescinded its 2021 Policy Statement on Breaches by Health Apps and Other Connected Devices, which had purported to apply the Health Breach Notification Rule to health apps and connected devices that collect consumer health information. The rescission follows the Commission's 2024 update to the Health Breach Notification Rule, which already covers health apps and connected devices like fitness trackers, and implements an executive order directing agencies to eliminate obsolete guidance documents. No company was charged or penalized; this is a deregulatory action.
New York Attorney General Letitia James secured an $8 million settlement from VGW Holdings Pty. Ltd. and its affiliates for unlawfully operating online sweepstakes casinos — Chumba Casino, Global Poker, and Luckyland Slots — that allowed New Yorkers to play casino games with virtual coins exchangeable for cash or prizes. The OAG's June 2025 cease and desist letter stopped the company from offering virtual coin gambling in New York, and Governor Hochul signed a formal ban on sweepstakes casinos into law in December 2025. Under the settlement, VGW will pay $8 million in disgorgement, penalties, and costs; note this is an illegal-gambling enforcement action rather than a privacy matter, so no privacy violation taxonomy categories apply.
$8.0M
Minnesota Attorney General Keith Ellison filed a lawsuit in Hennepin County against C4D, LLC, its owners Travis Benoit and Steven Legatt, and related entity Five Points Properties, LLC, alleging 18 counts of violating the Minnesota Human Rights Act, federal lending laws, and state consumer-fraud and contract-for-deed laws. The complaint alleges the defendants sold homes through predatory contracts for deed with inflated prices, hidden finance charges, and large annual balloon payments that leave buyers immediately underwater and forfeit all equity upon default, while targeting Somali-American Muslims on the basis of religion and national origin — a form of 'reverse redlining.' The AG seeks an injunction, civil penalties, and cancellation or reformation of existing contracts; no penalty amounts have been determined.
The FTC alleged that payment processor Humboldt Merchant Services knowingly processed payments for more than 1,000 shell merchant entities serving as fronts for fraudulent companies engaged in unauthorized billing scams, despite red flags including chargeback rates nearly 10 times higher than card-brand thresholds. Under the proposed stipulated order filed in the U.S. District Court for the Eastern District of Michigan, Humboldt will pay $12 million for consumer redress and is permanently banned from processing payments for merchants with a heightened risk of potential fraud.
$12.0M
Connecticut Attorney General William Tong announced a civil investigative demand into MediaLab.AI Inc., owner of the Kik Messenger app, over lax age assurance practices, content moderation, and child safety failures that advocates have dubbed a "predator's paradise." The action follows a July 2025 notice of violation under the Connecticut Data Privacy Act for privacy notice deficiencies and processing sensitive data — including health, biometric, and precise geolocation data — without proper consent, which the company has only partially addressed. The new investigation seeks records related to practices that may constitute unfair or deceptive acts or practices under the CTDPA and the Connecticut Unfair Trade Practices Act. No fine has been imposed to date.
Oregon Attorney General Dan Rayfield, leading a bipartisan coalition of 48 other state and territorial attorneys general, sent a letter urging the FCC to strengthen its 'Know Your Upstream Provider' (KYUP) rule so phone companies must properly vet, continuously monitor, and cut ties with upstream providers that facilitate illegal robocalls and caller ID spoofing. The coalition asks the FCC to set minimum vetting standards, require periodic re-checks rather than one-time contract reviews, strengthen caller ID authentication across the call chain, impose meaningful penalties, and mandate record-keeping for investigators. No fine or injunction was imposed; the letter notes Americans received more than 29.6 billion scam robocalls and texts last year and lost nearly $2 billion to these scams.
The FTC charged Canada-based payment processor Nuvei Corporation and its subsidiaries with knowingly processing payments for fraudulent merchants, including more than $30 million in payments for the Reimage tech support scam from 2017 to 2023, as well as merchants making false earnings claims and impersonating government tax authorities. Under the stipulated order filed in the U.S. District Court for the District of Arizona, Nuvei will pay $4.85 million for consumer redress, is banned from serving tech support telemarketers, and must implement robust merchant screening and chargeback monitoring practices. Note: this is a payments-fraud facilitation action under the FTC Act and Telemarketing Sales Rule, not a data privacy violation.
$4.8M
All data sourced from official government enforcement pages.