Mental Health Company Pays $7M for Not Safeguarding Data

The settlement came after the online health company Cerebral failed to secure sensitive data. A previous data breach in 2023 revealed that Cerebral had used invisible pixel trackers and exposed nearly 3.2 million consumers’ sensitive information without their clear consent. The complaint highlighted that Cerebral attracted consumers by promising “safe, secure, and discreet” services, assuring confidentiality and not sharing user data.