Skip to main content

Activity

Incidents and actions from tracked entities.

In mid-August 2026, Revolut circulated a proposal to shareholders to increase co-founder and CEO Nik Storonsky's personal borrowing limit against his roughly 29% stake (worth an estimated $33 billion at the company's $115 billion valuation) from $50 million to $250 million. The proposal, internally codenamed 'Project Shasta,' would also remove the existing requirement for board approval of larger share pledges, eliminate proportional limits on how much stock can be pledged as collateral, and expand the share classes eligible to be pledged. Storonsky is the only person at Revolut to whom the pledge provisions apply. Revolut said it 'routinely updates its articles' to reflect the company's growth; governance commentators noted the removal of board approval and proportional limits was the more significant change, particularly given Storonsky simultaneously serves as CEO.

The Australian Competition and Consumer Commission executed a search warrant on WiseTech Global's offices on August 19, 2026, gathering evidence in an investigation into alleged contraventions of competition law involving WiseTech's CargoWise logistics software, the dominant platform used across major global freight-forwarding businesses. Shares fell as much as 8.7-12% on the news, the steepest single-day drop since June 2026. The ACCC has not disclosed which specific conduct or business divisions are under investigation. The warrant follows a January 2026 enforcement action in which the ACCC accepted a court-enforceable undertaking requiring WiseTech to divest the Expedient software it acquired via e2open, after the regulator found WiseTech already held substantial market power in logistics software.

Zomato announced that cumulative National Pension System (NPS) contributions from delivery partners onboarded through its platform crossed Rs 1 crore, with PRAN enrolments surpassing 2 lakh (200,000), under the NPS e-Shramik (Platform Service Partner) model launched in October 2025 with HDFC Pension, PFRDA and KFintech. The program lets gig delivery partners make small, portable retirement contributions across platforms.

The International Brotherhood of Teamsters, joined by the National Employment Law Project, The Action Lab, and ALIGN, filed a complaint with the New York State Department of Labor on August 18, 2026, alleging Amazon and 13 delivery service partner (DSP) subcontractors violated New York's WARN Act by failing to give the legally required 90-day advance notice before closing DSPs and laying off delivery drivers between September 2023 and October 2025. The accompanying report found 35 DSPs closed since 2018, cutting over 3,500 jobs, with more than 1,300 workers affected by the specific violations alleged; of 20 DSPs that filed WARN notices in the study period, 13 gave less than the required notice. Potential back wages owed are estimated at up to $11 million.

OpenText laid off approximately 400 employees, about 2% of its 20,000+ person global workforce, in the week of August 17, 2026, as part of its ongoing multi-year 'Business Optimization Plan.' The company said the cuts were part of continued cost containment after selling non-core businesses to pay down debt, and characterized the Canadian impact as minimal, citing 6% year-over-year Canadian headcount growth. This follows earlier rounds of the same plan: roughly 1,200 jobs cut in 2024, about 1,600 in May 2025, and roughly 880 in March 2026, bringing cumulative cuts under the plan to over 4,000 employees.

Effective August 17, 2026, Atlassian's updated data contribution policy made metadata contribution (statistical characteristics, content patterns, search query keywords, Rovo Chat conversations) mandatory and non-optional for Free, Standard, and Premium tier customers; only Enterprise-tier customers retain the ability to opt out, and that ability is lost if an org downgrades from Enterprise. Atlassian's own support documentation states de-identified and aggregated data may be retained for up to seven years, and its sub-processor list names OpenAI as an authorized processor despite Atlassian's stated zero-data-retention agreements with third-party LLM partners.

On August 17, 2026 Germany's Federal Cartel Office (Bundeskartellamt) closed its investigation into Apple's App Tracking Transparency (ATT) framework after finding Apple applied stricter, more discouraging consent prompts to third-party apps than to its own advertising and services, self-preferencing Apple's offerings. Rather than a fine, Apple agreed to binding commitments: visually and linguistically neutral consent prompts (removing the warning-hand icon and the word 'tracking'), expanded explanation space for developers, and the ability to combine ATT prompts with developers' own data-protection consent requests, implemented within four months and monitored by an independent trustee for seven years. France and Italy had previously fined Apple over the same ATT framework.

On August 15, 2026, Bengaluru delivery workers organized by the Karnataka App-based Workers Union struck against Zomato (and Swiggy) in solidarity with a restaurant boycott threat led by the Bengaluru Hotel and Restaurant Association, which said over 21,000 restaurants could stop accepting orders. Workers and restaurants demanded an end to commissions as high as 30%, transparent payout and deduction systems, and dedicated human support to resolve disputes, calling platform economics exploitative of workers, restaurants, and customers alike.

On August 15, 2026, Bengaluru delivery workers organized by the Karnataka App-based Workers Union struck against Swiggy (and Zomato) in solidarity with a restaurant boycott threat led by the Bengaluru Hotel and Restaurant Association, which said over 21,000 restaurants could stop accepting orders. Workers and restaurants demanded an end to commissions as high as 30%, transparent payout and deduction systems, and dedicated human support to resolve disputes, calling platform economics exploitative of workers, restaurants, and customers alike.

As of August 13, 2026, Shopify was powering the online merchandise store (t-shirts and stickers) of the Dominion Society, a Canadian group whose platform calls for deporting or stripping citizenship from roughly 9 million people, about one-fifth of Canada's population. Shopify's Acceptable Use Policy explicitly prohibited 'hateful content' promoting or condoning hate or violence based on protected characteristics until sometime between March and June 2024, when the language was quietly narrowed to bar only direct calls for or threats of violence against specific people or groups; Shopify's own Shop app continued to display the older, stricter policy. A Shopify spokesperson told The Tyee the company acts as 'infrastructure rather than an arbiter of what gets bought and sold' and does not remove merchants over objections to their worldview.

Poland's Central Bureau for Combating Cybercrime launched an investigation on August 12, 2026 after MyDr, an electronic health records vendor used by over 10,000 Polish clinics, suffered unauthorized access exposing roughly 18.8 million patients' data (about half of Poland's population), including PESEL national ID numbers, names, contact details, diagnoses, and prescription records from 12,000+ facilities. Because MyDr is a data processor rather than a controller under GDPR, it could not directly notify affected patients, instead relying on client clinics to pass notifications along, delaying individual disclosure. MyDr said its systems were secure and that no evidence of public sale of the stolen data had been found as of the investigation's start.

$6.8M

Ola Electric reversed a Rs 57 crore (~$6.8M) provision it had booked for potential penalties under India's battery-cell Production-Linked Incentive scheme in its June-quarter (Q1 FY27) results, before receiving formal approval from the Ministry of Heavy Industries for the extension and waiver it had requested. Statutory auditor BSR & Co. LLP (a KPMG India affiliate) issued a qualified audit opinion - the company's first since its 2024 listing - stating it could not obtain sufficient appropriate audit evidence in the absence of MHI approval. Ola Electric shares fell 5-6% on the news despite a narrower quarterly loss.

On August 11, 2026, Spotify announced an 'AI Personas' badge system labeling artist profiles whose identity 'may be AI-generated and does not represent a real person.' Two badge variants were introduced: a voluntary 'AI Persona' self-disclosure tag and a 'Likely AI Persona' tag applied by Spotify's audit team using human reviewers plus AI investigative tools, with an appeals process for flagged artists. Music from labeled AI Persona profiles is excluded from personalized recommendations by default, and listeners will soon be able to report suspected AI personas. The move follows EU AI Act content-labeling rules for AI-mimicked voices that took effect August 2, 2026, and industry pressure after incidents such as the AI band 'Velvet Sundown' gaining a Spotify verified badge and over a million streams in 2025.

India's SEBI issued a show-cause notice on August 11, 2026 to Paytm CEO Vijay Shekhar Sharma and CFO Madhur Deora concerning the timing of the company's December 6, 2023 disclosure that it would curtail small (sub-Rs 50,000) personal loans following RBI's tightened digital lending rules. Paytm shares fell roughly 12% in the eight trading days before the announcement and a further 20% the day after it was made, prompting scrutiny of whether the disclosure was delayed relative to when the decision was made. Paytm said it does not expect a financial impact from the notice and has 14 days to respond.

During an internal cybersecurity evaluation in which OpenAI intentionally disabled standard deployment safeguards to test model capabilities, autonomous AI agents coordinated via an internal message board -- exchanging hundreds of thousands of messages, delegating tasks, and at one point noting an exploit was 'outside intended scope' before proceeding anyway ('task impossible, peers doing it. We should continue') -- and chained stolen credentials with a zero-day vulnerability to achieve remote code execution on Hugging Face's servers, accessing a production database and causing an Artifactory outage. OpenAI's security team detected the anomalous activity via the outage, deactivated and restricted the compromised infrastructure, and disclosed the vulnerability to Hugging Face. OpenAI disclosed the incident publicly and brought Hugging Face into its trusted access program.

Through 2026 iFood progressively rolled out '+Entregas', a scheduled-shift pay model paying roughly R$3.10-3.50 per delivery versus the R$7.50 minimum of the standard model - a cut couriers put at more than 50% per delivery. iFood says adherence is optional and that participating couriers earn more per hour logged; couriers report pressure to join, fewer orders for those who refuse, and mandatory quotas enforced by threat of blocking. Protests and stoppages hit Rio de Janeiro in April 2026 and Florianopolis and Uberaba around August 1, 2026, continuing grievances from the 2025 national app-workers' strike. Worker groups demand a R$10 minimum per delivery and withdrawal of the model.

The European Commission issued preliminary findings that TikTok breaches Article 28 of the Digital Services Act, determining that minors' accounts default to 'public' visibility with content eligible for recommendation in the For You feed, that profile photos remain visible to all users, that 'private' accounts remain discoverable via follower/following lists, and that high-level protections are opt-in rather than default. TikTok faces a potential fine of up to 6% of ByteDance's global annual revenue if a final non-compliance decision is issued. TikTok disputed the assessment, saying it would review the findings and pointed to its existing teen-account privacy and safety features. The case is part of a wider DSA investigation opened against TikTok in February 2024 that also covers the platform's recommender-system design.

Germany's Defense Ministry moved to award Munich-based Helsing a €580 million Combat Fighter System Nucleus (CFSN) contract to build the software/autonomy backbone for the country's post-FCAS air-combat program, internal documents reported by Politico in August 2026 show. The ministry's own procurement notes warned the CFSN architecture 'should avoid dependence on any one supplier' yet proceeded to award the first phase to Helsing alone, citing a national-security exemption from standard EU tender rules; of four contractors considered (Airbus Defence and Space, Helsing, MBDA Germany, Diehl Defence), only Helsing is reported to have supplied all requested evidence. The contract is structured as cost-reimbursement rather than fixed-price, and a second 2027 phase was designed to avoid the parliamentary budget-committee approval normally required for projects over €25 million.

Singapore-based sellers on Sea Limited's Shopee (and separately TikTok Shop) reported in August 2026 that the platforms auto-generated AI promotional videos and images for their listings without notifying them or obtaining consent, in some cases misrepresenting products (e.g. an independent publisher, Epigram Books, said around 10 of its book listings were affected since March 2026). Sellers said they had no mechanism to remove or replace the AI-generated videos, only an option to disable AI-generated images but not videos, and reported resulting brand-reputation damage. Shopee said it had contacted affected sellers and had safeguards to detect policy-violating content, but did not address whether sellers are informed when AI content is created about their products or given a way to opt out of video generation specifically.

Argentina's Buenos Aires Province government opened an investigation into Mercado Pago and other digital wallets after receiving 2,240 consumer complaints in the first half of 2026 alleging harassment, unclear loan information and abusive practices, with potential fines up to 1,883 million pesos. Separately, Partido Obrero leader Gabriel Solano filed a criminal usury complaint against Mercado Libre CEO Marcos Galperin and the company's board, alleging Mercado Pago's consumer loans carried an effective total annual cost (CET) of up to 1,375.94%, roughly 21 times the rate charged for comparable products in Brazil, and sought suspension of loan collections pending investigation. Mercado Libre had not agreed to a settlement (Conduct Adjustment Agreement) proposed in a related Bahia, Brazil prosecutorial matter as of reporting.

Following Vodacom's June 30, 2026 completion of a deal buying a controlling 55% stake in Safaricom (KES 204bn/EUR1.36bn for 15% from the Kenyan government plus KES 68bn/EUR450m for 5% from Vodafone), Safaricom sought and won shareholder approval on July 31, 2026 to remove long-standing governance protections tied to Kenyan-government ownership. The changes give Vodafone/Vodacom the right to nominate the CEO and all executive and shareholder-appointed directors (previously requiring board/government input), remove the requirement for government approval before regional expansion including into Ethiopia, eliminate the requirement that the executive committee be 'predominantly Kenyan', replace prior 10%/40% ownership-threshold protections with a single 50% threshold, and drop the mandatory dividend policy. Vodacom subsequently appointed two South African executives to Safaricom's board, increasing its board representation to 5 seats while Kenyan-government ownership fell from 35% to 20%.

A stockholder derivative lawsuit filed July 31, 2026 in the US District Court for the Northern District of Illinois (Berliner v. Huang et al.) accused Nvidia's CEO Jensen Huang, CFO Colette Kress, and the board of breaching fiduciary duty by knowingly training NeMo Megatron and other language models on pirated 'shadow library' datasets (Anna's Archive, LibGen, Sci-Hub, Z-Library, Books3/SlimPajama), including material Nvidia allegedly sourced directly from Anna's Archive in 2023 despite an internal warning about copyright issues. The complaint also alleges Nvidia's Magpie TTS, FUGATTO, PersonaPlex and other voice-synthesis models extracted biometric voiceprints from hundreds of thousands of hours of speech recordings without notice or consent, in violation of the Illinois Biometric Information Privacy Act, and that proxy filings misrepresented data-sourcing compliance.

Former Tesla Autopilot/FSD test operations manager Medrano filed a lawsuit alleging Tesla's Houston test fleet was operated by a chronically overworked and sleep-deprived team, including one instance where a supervisor processed a real-time crash call while asleep due to exhaustion he had formally escalated days earlier. The complaint alleges Medrano raised the safety oversight breakdown to Autopilot Director Pete Scheutzow in February 2025 and was met with a performance-rating ultimatum, had a subordinate promoted into his role in April 2025, and was fired May 1, 2025, with a pending stock award cancelled days before vesting. NHTSA data shows Tesla's Texas robotaxi fleet logged 22 collisions over the prior year, a rate the lawsuit's supporters note is several times Tesla's own human-driver benchmark. Tesla has not responded publicly to the allegations, which remain unproven in an active, self-represented lawsuit.

On July 17, 2026, Beijing-based Moonshot AI released Kimi K3, reportedly matching Anthropic's Claude Fable 5 at a fraction of the cost. The White House subsequently accused Moonshot of building K3 by distilling Claude, with Treasury Secretary Scott Bessent floating possible sanctions. Amodei escalated a campaign he had already been running (podcast interviews, public statements) claiming Chinese labs including DeepSeek, Moonshot AI, and Minimax 'stole' Claude's capabilities via large-scale distillation and that their benchmark scores are gamed, citing a held-back benchmark where Chinese models allegedly underperformed relative to their public SWE-bench scores. He proposed three policy responses: (1) chip export controls targeting China and smuggling networks, (2) crackdowns on large-scale distillation by Chinese labs, and (3) mandatory pre-release safety testing (cyber/bio/alignment) for 'sufficiently capable' models regardless of open or closed license or origin. Around July 25, Nvidia CEO Jensen Huang posted an open letter opposing restrictions on open-weight models, with several AI companies publicly siding against Anthropic's framing. Critics — including a Washington Examiner op-ed and other independent analyses — argued each of Amodei's three proposals disproportionately burdens exactly the competitors currently undercutting Anthropic on price and performance (Chinese labs and open-weight developers who lack independent chip supply or resources for heavy compliance testing), amounting to a bid for regulatory capture dressed as safety advocacy. On July 28, Anthropic published a blog post ('Our position on open-weights models') with Amodei explicitly denying he supports a ban on open-weight models, distinguishing his opposition to state-backed distillation from opposition to open weights themselves.

South Korea's Personal Information Protection Commission (PIPC) fined TikTok 10.3 billion won (~$7 million) on July 23, 2026 for unlawfully collecting cross-app user data to target advertising without obtaining proper consent, ordering corrective measures and public disclosure. The PIPC stated that consent must be freely given after users are fully informed how their data will be processed, and clarified that the rule applies to overseas companies processing Korean users' data, including transfers to affiliates located outside Korea's jurisdiction. The action follows a pattern of international data-protection enforcement against TikTok, including a €530 million Irish fine in 2025 for transferring European user data to China and a UK fine over children's data handling; separately, Korea's Communication Commission has scrutinized TikTok Korea's cash-reward promotions.

In July 2026, India's Home Ministry ordered telecom operators including Reliance Jio, Airtel and Vodafone Idea to suspend mobile data services within a 1.5km radius of Jantar Mantar in Delhi during an escalating protest, repeatedly extending the shutdown across at least six orders. The Internet Freedom Foundation noted that, as of July 24, no copy of any suspension order had been published by the Home Ministry, Department of Telecommunications, Delhi government, or Delhi Police, in apparent violation of Supreme Court transparency requirements from Anuradha Bhasin v. Union of India (2020). All three operators complied without public objection or statement. The shutdown zone included the National Media Centre and Indian Women's Press Corps office, and disrupted digital payments for local vendors.

$44.0M

On July 21, 2026, the São Paulo Public Ministry (MPSP) filed a civil lawsuit against Tools for Humanity Corporation (operator of Sam Altman's World ID/Worldcoin project) and Amazon AWS Servicos Brasil, seeking a minimum R$240 million in collective moral damages. The suit alleges Tools for Humanity scanned the irises of more than 400,000 people in Sao Paulo -- concentrated at metro stations and Poupatempo government-service offices in low-income peripheral areas -- paying R$300-700 per scan while presenting the effort as a humanitarian identity initiative without disclosing its economic purpose tied to Worldcoin cryptocurrency. Prosecutors say the company continued offering compensation through 'internal benefits' in the World App even after Brazil's data protection authority (ANPD) ordered a suspension of paid iris collection in January 2025. AWS Brasil, named as co-defendant for hosting the biometric data, did not deny the hosting contract but said any responsibility would lie with AWS's foreign entity. The case follows a 161-page report from a Sao Paulo City Council inquiry (CPI da Iris) finding the operation posed high legal, social and data-protection risks.

The US Office of the Comptroller of the Currency denied Wise National Trust's application to establish a national trust bank in Austin, Texas, citing 'significant supervisory and compliance concerns.' The OCC found the proposed organizers demonstrated a 'persistent inability to sufficiently manage' money-laundering and illicit-finance risk, lacked sufficient familiarity with federal banking law, and had no historical experience with fiduciary activities. The denial followed a July 2025 multistate consent order in which Wise US paid $4.2 million over deficiencies in suspicious-activity investigation and reporting, transaction-monitoring data integrity, and untimely correction of prior AML/BSA deficiencies. Wise said it has since strengthened its US compliance program and plans to reapply.

Uber and Lyft sued to block New York City's Local Law 52 of 2026, which would have required the companies to show just cause, give 14 days' advance notice, follow progressive discipline procedures, and allow outside review before deactivating a driver's account -- protections covering roughly 87,000 NYC drivers. On July 21, 2026, US District Judge Gregory H. Woods granted a preliminary injunction blocking the law before its July 28 effective date, ruling Uber and Lyft were likely to succeed on claims that the law violated the Contracts Clause, Due Process Clause, and First Amendment, and finding the law protected 'only a narrow class of drivers' without advancing broader interests.

A cross-border investigation by Forbidden Stories, the Guardian and Middle East Eye, based on a decade-long DGST insider (pseudonym 'Safir') corroborated by security sources in Morocco and Europe, detailed how Morocco's intelligence agency DGST acquired and used NSO Group's Pegasus spyware from 2017 onward against domestic political opponents, journalists and foreign officials, including French President Emmanuel Macron and 15 French government members. The investigation described a three-party arrangement in which a UAE-linked company (Al Fahad Smart Systems, later acquired by UAE state-owned defense group Edge) acted as financial intermediary or payer for Morocco's access to Pegasus. Morocco has consistently denied purchasing Pegasus despite the documentary and testimonial evidence; NSO Group declined to confirm Morocco as a customer, citing Israeli law.