CyberHappenings logo
☰
Home Browse Watchlists Experimental About

Track cybersecurity events as they unfold. Sourced timelines. Filter, sort, and browse. Fast, privacy‑respecting. No invasive ads, no tracking.

Commercial data harvesting disclosed in widely deployed browser extensions across streaming, ad blocking, and enterprise tools

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

More than 80 widely used browser extensions, collectively installed millions of times, disclose in their privacy policies that they collect and sell user data. The extensions span categories including streaming utilities, ad blockers, and enterprise tools, and rely on broad legal language to commercialize data without hidden tactics. LayerX Security analysis of 6,666 policies confirmed 82 extensions engaged in commercial data sharing, including a network of 24 streaming extensions reaching 800,000 users that package viewing behavior, preferences, and inferred demographics for third parties.

Timeline

  1. 27.04.2026 16:30 1 articles · 1h ago

    Browser extension privacy disclosures reveal large-scale commercial data monetization across millions of users

    Security researchers report that more than 80 browser extensions explicitly disclose in their privacy policies that they collect and sell user data, including streaming utilities, ad blockers, and enterprise tools. Analysis of 6,666 policies confirms 82 extensions engaged in commercial data sharing, with a streaming extension network reaching 800,000 users and ad blockers totaling 5.5 million users also monetizing browsing data. The findings indicate systemic exposure of user behavior and internal enterprise activity due to disclosed but unchecked data monetization practices.

    Show sources
    Open in new tab

Information Snippets

  • LayerX Security identified 82 extensions across categories such as streaming, ad blocking, and productivity that reserve the right to sell or share user data, with millions of combined installations.

    First reported: 27.04.2026 16:30
    1 source, 1 article
    Show sources

  • 71% of Chrome Web Store extensions reportedly lack published privacy policies, leaving over 73% of users with at least one installed extension that offers no visibility into data handling.

    First reported: 27.04.2026 16:30
    1 source, 1 article
    Show sources

  • A network of 24 media extensions—including tools for Netflix, Hulu, Disney+, Amazon Prime Video, and HBO Max—captured viewing behavior, preferences, and demographic data from approximately 800,000 users and packaged insights for advertisers and analytics firms.

    First reported: 27.04.2026 16:30
    1 source, 1 article
    Show sources

  • At least 12 ad blockers with over 5.5 million users were found to sell or share browsing data, including inferred sensitive attributes based on user activity.

    First reported: 27.04.2026 16:30
    1 source, 1 article
    Show sources

  • 29 business-focused extensions were identified that gather browsing data from enterprise systems, potentially exposing internal activity through commercial datasets.

    First reported: 27.04.2026 16:30
    1 source, 1 article
    Show sources