www.classaction.org Class Action Lawsuit Claims Google, UPS Misuse User Data via Tracking Widget
Article Content
- •Google and UPS face a class action lawsuit for allegedly disclosing user data.
- •The 'Track your package' widget reportedly sends extensive personal information without consent.
- •The lawsuit claims misleading representations about data privacy by both companies.
A class action lawsuit filed on October 9, 2026, alleges that Google and UPS improperly disclose users' private data through their 'Track your package' widget. The lawsuit claims that despite assurances that only tracking numbers are transmitted, the widget sends extensive personal information to numerous third parties, including Meta and Microsoft, without user consent. Users are led to believe that their sensitive data remains private, as indicated by a misleading statement on the widget. The case highlights that clicking the 'track' button generates 415 separate network requests to UPS and other domains, potentially exposing user data. The lawsuit seeks to hold both companies accountable for violating privacy expectations.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Google LLC in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What are the main allegations in the lawsuit?
How does the tracking widget misuse data?
What should users do if they are concerned?
Continue Reading
Critical RCE Vulnerability in Prefab UI Disclosed A critical remote code execution vulnerability, CVE-2026-120338, was disclosed on November 1, 2026, affecting Prefab UI's Generative UI sandbox. The flaw allows attackers to execute arbitrary Python code by exploiting Deno's permissions, enabling file read/write access on the host server. This vulnerability affects… 
Volt Typhoon's Silent Train Network Targets US Critical Infrastructure The Chinese state-sponsored hacking group Volt Typhoon has been linked to a covert network called Silent Train, which has exploited at least four zero-day vulnerabilities over three years. This network utilizes rapidly rotating chains of compromised SOHO routers, IoT devices, and enterprise infrastructure to access…