Evidence archive · 102 files on record · 10 sections
Research
Source material, reference documents, and the receipts behind every claim in the Evil Robots series.
The evidence base. Primary sources, data sets, sourced citations, and the documentation behind every claim made in the books. If a chapter says something happened, the research section has the receipt. If a name appears in the text, the sourcing is here.
These are curated, public-facing reference pages — not raw research dumps. Each page organizes the strongest material on a topic with full source URLs.
These are written to be read by a stranger who does not trust us. A claim about a named person or institution carries the URL that supports it, and the URL goes next to the claim rather than in a pile at the bottom. Where the record is genuinely contested, both readings sit on the page with their attributions intact. Where a source has gone dead, it says so and points at the archived copy. Where nothing sourceable exists, the gap is marked instead of papered over.
Filed by subject, in reading order: the framework first, then the control grid the books document component by component, then the people who operate it, and last the three surfaces the series closes on — the machine, the mind, and the body. The books draw on these files, and most files feed more than one; the coloured chips on each card say which.
The dates are the dates each file was actually started, recovered from the repository.
Series-Level Research
Deep dives that span the series:
The Twitter Files: Complete Index — All 19 installments with summaries, key findings, and primary source links. The FBI-Twitter pipeline, Hamilton 68 fraud, CENTCOM sock puppets, the Virality Project, and COVID censorship of true claims.
Vehicle Control Infrastructure — The convergence of impaired driving prevention, remote disable, insurance telematics, and mandatory speed assistance. Every system built for safety creates a control capability. Full sourcing for the RIDE Act, OnStar, Tesla OTA, EU ISA, China’s EV monitoring platform, and starter interrupt devices.
Prompt Injection Timeline — The “permanently unfixable” admission timeline. OpenAI, the UK NCSC, Anthropic, Cisco, and the “Attacker Moves Second” paper. Why the foundational security flaw in every LLM-based system cannot be patched.
By Topic
Research reference files feeding the books:
NSA and Snowden — PRISM, XKeyscore, Section 702, the FISA Court (99.97%), Five Eyes, EO 12333, the Utah Data Center, and the NSA-to-AI transition.
The Twitter Files — All 19 installments, the FBI-Twitter relationship, Hamilton 68, Hunter Biden suppression, COVID censorship, CENTCOM, and GEC blacklists.
AI Content Moderation — Meta’s 97% automation claim, YouTube’s 2.2 billion Content ID claims, TikTok moderator PTSD, NetzDG as template law, automated hate speech bias, and the Gillespie paradox.
CBDCs and Programmable Money — China’s digital yuan (3.48 billion transactions), the US legislative ban, the EU digital euro fight, Nigeria’s eNaira failure, and BIS quotes about “absolute control.”
Deplatforming Cascade — Parler, the Canadian convoy financial kill chain, WikiLeaks banking blockade, Operation Choke Point, the Cloudflare precedent, and infrastructure vs. platform censorship.
Digital Identity Systems — India’s Aadhaar (starvation deaths from authentication failures), EU eIDAS 2.0 (Article 45 browser security), Worldcoin (iris scanning bans in 8+ countries).
Telecom Subversion — Salt Typhoon compromising CALEA backdoors, SS7 vulnerabilities, the Athens Affair, Room 641A, FAIRVIEW, and STORMBREW.
Intelligence Portal Compromises — Every surveillance capability eventually gets turned against its builders. DEA portal hack, fraudulent emergency data requests, FBI InfraGard breach, Hacking Team dump, FinFisher, Pegasus, OPM breach, Dual EC DRBG.
How the series reads a capture: the mechanism, the axes, the doctrine behind it, and the comparative architecture the rest of the archive is scored against.
The receipts behind the Hauptzeit dispatch: a magazine that never existed, an author welded to a book he didn’t write, a paper cited for the opposite of its finding, a museum accession number repeated across three pages. Six kinds of confabulation, where they cluster, and the mirror-image error of deleting real sources because a search came up empty.
A doctrinal dichotomy behind the control grid — the management doctrine (keep a system in permanent supervised tension) versus the development doctrine (build capability and end the condition). Its foreign-policy genealogy, the finance principal behind it, and a live 2026 instance.
Our own political-taxonomy frame for the Evil Robots series and evilrobots.lol — NOT an adopted external model (Pew/8values/etc. import their own loaded labels).
Which states run a full Ratchet architecture (think tanks, intelligence services, a revolving door) and which are customers, satellites or non-players: the Five Eyes, Japan, South Korea, India, Israel, China, Russia and the Gulf surveillance customers, with every institution and person linked into the revolving-door graph.
Who flagged what to whom between 2018 and 2024: the Stanford Internet Observatory and its two partnerships, the Global Disinformation Index, NewsGuard, the DFRLab and Hamilton 68, the Aspen commission; the NSF, GEC and CISA money; Murthy v. Missouri and Hines v. Stamos; the 2024-26 collapse and the visa bans. With the strongest version of the defense, which the court record partly supports.
Reducing a person to a number that gates access, country by country — China’s court blacklist, the EU’s SCHUFA and ESG frameworks, India’s credit-bureau expansion, the US/UK FICO-and-COMPAS layer. The component the Convergence Index scores.
The off-switch on money, country by country — China’s programmable e-CNY, the EU’s promised-not-to ECB, India’s PMLA freezes, the US/UK sanctions-and-debanking record. The component the Convergence Index scores.
Who can take content down, slow a network, or pull the plug — country by country. China’s Great Firewall, the EU’s DSA, India’s shutdown record, the US/UK platform-and-statute layer. The component the Convergence Index scores.
Health data as a control surface, country by country — China’s repurposed health codes, the EU-to-WHO certificate network, India’s ABDM health stack, the US HIPAA-with-law-enforcement-carve-outs reality. The component the Convergence Index scores.
How states project influence through diaspora and lobbying channels — and how host states register (or fail to register) it. China’s United Front, the EU’s emerging foreign-agent regimes, India’s inbound/outbound asymmetry, the US dormant-FARA reality and the UK’s newly-active FIRS. The component the Convergence Index scores.
Identifying a face in a crowd, country by country — China’s SkyNet, the EU’s banned-with-exceptions AI Act, India’s no-framework rollout, the US Clearview-scraping model and the UK’s Met Police live deployment. The component the Convergence Index scores.
Programmable money, country by country — China’s e-CNY, the EU digital euro, India’s UPI, the US dollar rail. Who can see every transaction, and who can switch one off. The component the Convergence Index scores.
How four polities built the identity layer — China, the EU, India, the US and UK. The component the Convergence Index scores, with the receipts, country by country.
Who decides what speech survives, country by country — China’s pre-publication review, the EU’s DSA, India’s takedown rules, the US private-governance layer and the UK’s Online Safety Act duties. The component the Convergence Index scores.
Harvesting the body as a key, country by country — China’s Xinjiang DNA program, the EU’s ICAO passports, India’s Aadhaar fingerprints and iris, the US/UK border-and-forensics layer. The component the Convergence Index scores.
The collection layer the rest of it runs on — signals intelligence, telecom, the data-broker purchase that launders a warrant requirement, and the sensors already in the workplace, the classroom, and the car.
The cryptographer’s case against encryption backdoors in his own words: the 2007 Dual_EC_DRBG warning that Juniper later proved, why an access door for the good guys is a door for everyone, the surveillance partnership between governments and the companies that hold our data, his testimony, and the Crown Sterling episode as the record actually has it.
The government cannot warrantlessly collect the data, so it buys the same data from private brokers instead — a purchase that launders the prohibition, sourced end to end.
AI safety teams dissolved when they conflicted with product velocity; surveillance vendors selling to authoritarian regimes; security vendors captured or owned by state actors. Routed from the security-charlatans corpus.
Chinese state-sponsored hackers compromised at least nine US telecom companies: AT&T, Verizon, T-Mobile, Lumen, Spectrum, Consolidated Communications, Windstream. Specifically targeted the CALEA-mandated lawful-intercept systems — the wiretapping backdoors the US government required telecoms to build.
Reference document for institutional control infrastructure research. Covers workplace algorithmic management, employee monitoring software, and the consumer IoT surveillance ecosystem.
What they monitor: Webcam, audio, screen, keystroke patterns, eye tracking, room scans. ExamSoft collects ‘retina or iris scan, fingerprint, voiceprint, or scan of hand or face geometry.’
Who decides what survives contact with a platform: the government-to-platform channel, the automation that does 90% of it, and the reference works that quietly became governance surfaces.
A research position. A fringe internet-culture conspiracy claimed the web had ‘died’ and filled with bots and machine-authored filler run by a hidden hand. It was wrong about the who and — measurably, between 2023 and 2026 — right about the what. Documented FACT separated from myth, and the strong-psyop claim graded, not adopted.
How the world’s default encyclopedia became a contestable governance surface — read off its own record, with the self-correction that complicates the story left in.
The Twitter Files, all 19 installments: the FBI relationship, Hamilton 68, the Virality Project, and the government-to-platform flagging channel — with primary receipts and the downstream litigation.
WSJ nine-part ‘Facebook Files’ series based on internal documents. Key findings: XCheck system exempted 5.8 million high-profile users from content rules. Internal research showed Instagram harmed teen mental health. The 2018 algorithm change backfired into polarization.
Automated detection accounts for over 90% of content actions. In 2021, Meta claimed AI proactively removed 97% of hate speech before anyone reported it.
Programmable money, debanking, the funding structures that hide who paid, and the financialization that hollowed out the firms that used to build things.
Run 551 people, 487 institutions and 1,247 sourced career edges through centrality and co-occurrence counts and the patterns nobody hand-picked fall out: Kissinger at the center, the White House as the real bridge desk, a five-person surveillance core, and the AI founders and AI regulators as one revolving cohort. With the findings that did not survive the count.
Who steers the intergovernmental bodies, measured per entity from their own books: WHO’s earmarked donors, the Human Rights Council’s seats, Davos’s price ladder, the IMF’s single-member veto, the WTO’s Green Room, and the same signature in the bodies that now govern AI. Current to October 2026.
How donor-advised funds and fiscal sponsorship obscure who pays for advocacy — the identical provenance-hiding structure run at comparable scale by the left (Arabella), the right (DonorsTrust/Leo/Marble), and foreign state channels (USAID/NED), and how the same money wires into the designation machine.
Case files on engineering companies killed by private equity, financier capture, and litigation pivots — GEC/Marconi, Boeing, GE, Lucent, Nortel, Rambus and more. Every claim carries a verified source.
The dominant form of great-power conflict is now non-kinetic: currency chokepoints, sanctions, tariffs, export controls, industrial policy, and — at the edge — designation-authorized force. The instruments, the competing state ratchets (US / China / BRICS, and the EU, Gulf, Russian, Indian and private-dollar grids), and why exercising a capability builds the counter-capability.
January 6: Capitol riot. January 8-9: Google removes from Play Store, Apple from App Store. January 10 (midnight): AWS terminates hosting — Parler fully offline. January 11: Parler sues Amazon. January 21: Judge denies injunction.
A CBDC is a digital national currency that is a direct liability of a country’s central bank. The critical distinction from existing digital money: programmability. CBDCs can be hard-coded with rules that govern how, when, and on what the money can be spent.
The oldest ratchet in the archive. Lobbying, labor arbitrage, intelligence services working through diaspora channels, and the pre-1900 precedents for all of it — held to one documentary standard regardless of whose side it embarrasses.
The tradecraft of subversion as a spectrum — from kinetic intelligence work (assassination, sabotage, honeypots) through active measures, ideological fronts, and Stasi Zersetzung to behavioral compliance and soft censorship. The ratchet prefers the soft tools: cheap, deniable, scalable, bloodless.
Separating documented fact from conspiracy — Charles III’s real ties to Islam, Islamic finance, Perennialism, and Gulf-state donations, and why the ‘Muslim Brotherhood’ framing is an unsupported myth traceable to LaRouche-style conspiracy literature.
US aid to Israel as the official, appropriated, statutory record — the 2016 MOU, FMF, missile-defense co-funding, the QME statute, loan guarantees, and the 2024 supplemental — sourced to CRS, public laws, State, and GAO.
The pro-Israel lobby in US politics as a coalition of named organizations, donors, and FEC-documented political spending — same documentary standard as the Cuban, Armenian, Indian, and Chinese influence apparatuses
Documented Israeli state-linked information operations — STOIC/Zero Zeno, institutional hasbara, the Oracle/TikTok question — held to the same standard as Russia’s IRA and China’s UFWD, and bounded the same way.
A documented legal mechanism — the Law of Return plus the 1978 non-extradition rule — producing named cases, surfaced and quantified almost entirely by Jewish outlets and Jewish child-protection advocates.
The political-economy of citizen rage on US immigration/labor-arbitrage discourse. Who collects the rent — media outlets, advocacy 501(c)s, politicians, platforms — and at what scale, per primary-source financial filings. Companion to the six-dossier diaspora/labor-arbitrage workstream in The Ratchet.
The discourse layer wrapping the labor-arbitrage / diaspora-influence / immigration mechanism — recurring frames, talking points, and the orgs / spokespersons / media outlets that deploy them, in the US and peer liberal democracies. Companion to six in-flight mechanism dossiers (US PACs, H-1B body shops, EU/UK, CA+AU, postwar intel, historical precedents). The Ratchet needs this to show how the mythology obscures the institutional capture documented in the other six.
Why Mexico runs no AIPAC/USINPAC-style diaspora PAC — not absence from the influence game but the opposite: the Mexican state is the actor itself, backed by a remittance stream that exceeds its oil revenue and a cartel export economy Washington treats as a national-security threat.
Pre-1900 historical cases of foreign-commercial-dominance displacing or threatening native economic and political position. Deeper-dive dossier expanding Section 7 of Historical Precedents — When Polities Confronted Foreign-State or Foreign-Commercial Displacement, supplying the Embassy / Quarter chapter argument with case-by-case historical grounding. Chronologically organized, ancient-through-19th-century, with primary source where available, named historians per case, and an adversarial-review appendix that pre-empts both libertarian and restrictionist cherry-picks.
Intelligence services as institutional actors instrumentalizing diaspora communities — postwar Mossad/CIA/KGB template and its worldwide adoption by MSS, RAW, MOIS, MIT, FSB/GRU, GIP, and others
Historical precedents and responses across the catastrophic-to-tolerable spectrum when polities faced foreign-state-influence or foreign-commercial-dominance displacement of native economic/political position. Sixth companion dossier to the diaspora-influence research workstream.
H-1B/L-1 labor-arbitrage and discrimination enforcement record — DOJ settlements, congressional findings, top-employer concentration, wage-suppression studies. Companion to Embassy/diaspora-PAC dossier in The Ratchet ch 8.
European analog to the US diaspora-influence + labor-arbitrage Ratchet pattern — per-country diaspora-influence operations (UK, DE, FR, NL, SE, BE, CH, Eastern Europe) and EU/national labor-arbitrage mechanisms (Posted Workers Directive, UK Skilled Worker / Health & Care Worker visa, NHS recruitment, Blue Card / Chancenkarte, Schengen freedom of movement, informal southern-EU sectors). Companion to two in-flight US dossiers (diaspora PACs + H-1B body shops). Structural argument, sourced to parliamentary records, court rulings, regulator findings, and major-outlet investigations. No motive imputation. UK-libel-aware.
Canada and Australia Ratchet pattern — Five Eyes companions to the US diaspora-PAC + labor-arbitrage dossiers, anchored on Hogue Commission (Canada) and FITS register (Australia) public records
What happens at the sharp end: the legal establishment that staffs both sides of the revolving door, reclassification that unlocks lethal force, raids on people who did not warrant them, and a ledger of the dead.
The suit, the amicus brief, the regulatory complaint, the discovery dragnet and the designation list, documented as instruments across every faction, with case status current to October 2026.
Not a body count and not a suspicious-deaths list — a documentary ledger where each death carries its official ruling, the questions attributed to whoever raised them, and no homicide asserted against anyone.
Overwhelming tactical force pointed at people who did not warrant it — pre-dawn arrest theater on the non-violent, raids on journalists over newsgathering, and the innocent dead of mistaken-identity entries. Disproportion and wrong target, not ordinary drug or violent-crime raids.
The control grid gets built everywhere, but it meets different resistance — and the variable is constitutional tradition, not culture. American entrenched rights block the speech ratchet and externalize control; British parliamentary sovereignty enables it; French general-will republicanism justifies it. Three shapes of control, not a freedom leaderboard.
A public-health problem was reclassified as an armed conflict, and the reclassification unlocked lethal force without trial. FTO designations, an ‘unlawful combatant’ finding, a withheld legal memo, 210+ dead at sea, a secret target list, the invasion of Venezuela and capture of its president, and an expanded domestic removal power — the narcoterror pawl, documented.
The machine itself — measured bias, agent incidents, the unfixable injection flaw, the NDAs, the liability docket, and the safety brand sold by the firms selling the risk.
Every test harness, red-team framework, benchmark, guardrail model and security vendor the graders of frontier AI are built on: what each does in its maker’s words, who owns it today and since when, the licence, the money, and which lab, government institute or standard names it. Covers the tools released by OpenAI, Anthropic, Google DeepMind, Meta, Microsoft, NVIDIA, Amazon, IBM and Cisco, the government harnesses, the open benchmarks, the vendors, and the published methods underneath them.
The working map of the AI evaluators’ ties to the labs they test and the governments that are meant to oversee both: which outside evaluators each lab names in its own system cards, the government contracts, grants and board seats, the policy positions each faction argues and what each position would pay it, and the people who hold several of these seats at once. Every row sourced to the parties’ own documents.
Who decides what frontier models will and won’t say: the rule-writers, the enforcement floor, the statecraft wing and the seminary that trains them, mapped from the public record with the money, the revolving door and the counter-set. Current to October 2026.
The four routes into platform trust-and-safety leadership, measured against the record: prosecutors and federal lawyers first, the volunteer moderator last. Plus the democracy-promotion money that fed the disinformation labs, what Reddit and Discord did to their own moderators, and which of the popular links are documented and which are not. Current to October 2026.
How one philanthropic premise became the plumbing that decided which AI risks got institutions, staff and a seat in Congress: the grants, the board seats, the fellows, the asymmetry in the funder’s own words, and the 2026 turn to political money. Current to October 2026.
A defence minister’s voice, a CFO’s face, a fifteen-year-old’s sobs, a principal’s career, twenty-eight schoolgirls and one woman’s 830 links. The long versions of the cases in Chapter 10, each from the record.
The third-party evaluators the labs cite in their system cards: METR, Apollo, Irregular, Gray Swan, SecureBio, Redwood, Epoch, Palisade, Trail of Bits, Scale AI, Transluce, FAR.AI, Andon Labs and the government institutes. Who funds each, who they test, the 2026 evaluation escapes, the disclosed relationships between the graders and the graded, and OpenAI’s reported talks to buy Trail of Bits.
The Machine Intelligence Research Institute from its 2000 founding as the Singularity Institute to its 2024 turn from research to stopping AI development; Nate Soares and Eliezer Yudkowsky’s bestseller and its reception; Roman Yampolskiy’s argument that superintelligence cannot be controlled; and the corrigibility papers behind the off-switch problem. Every claim in the figures’ own words.
Columbia at fifteen, OpenAI’s superalignment team, a contested 2024 firing, the 165-page Situational Awareness essay, and the hedge fund named after it: from $1.5 billion to a reported $45 billion peak, a July 2026 forced sale to Citadel, and a surviving stake in Anthropic. Both sides of the firing; every fund figure dated.
More than 2,100 court decisions worldwide finding that a filing relied on AI-invented citations, catalogued by a Paris lawyer and lecturer. Who runs the database, how it decides what counts, what the October 2026 figures show (pro se litigants outnumber lawyers; most cases are American; 2026 already has more than all prior years), and the anchor cases from Mata v. Avianca to a $110,204 sanction in Oregon.
In January 2024 RAND found no statistically significant uplift from language models in planning a biological attack. Sixteen months later the same institution found frontier models beating experts on lab-protocol benchmarks, and Anthropic locked down its own model because it could no longer rule out uplift. By 2026 the labs’ early-warning tests are saturated. The record, with the counterweight.
Two frontier-lab CEOs briefed the UN Security Council on 23 September 2026. Six days later the White House produced a voluntary accord and renamed AI. What each party said, what was signed, who paid for what, and which of the claims that travelled with the story the record supports.
How automation exposure concentrated in the lower-skill tier and the developing world produces a population to manage — and why the control is the programmable rail the transfer runs on, not the transfer itself.
The firms selling the AI risk are the firms selling the cure. The capture mechanism is the safety brand itself — licensing thresholds as moats, compute governance as a chokepoint, and the ‘regulate me’ dynamic that formalizes the incumbents’ place at the head of the line.
The AI-governance debate is a fight over who operates the control grid, not whether one gets built. Hard law, voluntary standards, and compute chokepoints — and what held versus what reversed in 2025–26.
How OpenAI’s pre-2024 exit paperwork tied a lifetime non-disparagement clause to vested equity — the mechanism, the reform arc, the refusers, and how the practice compares across labs and industries.
AI-mediated employment decisions where a documented human harm sits in a court record, regulator action, or named principal’s own words — the hiring screeners, video-interview scorers, firing algorithms, and the case law now holding the vendors liable.
The people who left, warned, refused, or were destroyed by the AI apparatus — each adverse claim attributed to a court, a filing, a sworn hearing, or the person’s own on-record words, and no cause adjudicated that a tribunal has not.
What a political instrument measures in a language model when nothing political has changed. 32 author-written propositions, 65 models, 3,897 runs, no language model in the scoring path: the deliberate manipulation is the same size as reprinting the questions in a different order, refusal is a switch the prompt throws, and the models barely disagree. An audit of fourteen published studies finds the control that would have shown it missing from all of them. Data, scripts and paper at github.com/gorrie/bias-study.
The layer Book 3 is about. Persuasion, completion, flattery, the nudge apparatus that industrialized it, and what happens to a model that eats its own output.
Five independent findings on what happens when a language model’s constraint layer is tightened: narrow constraint produces broad misalignment, refusal is one brittle direction, over-tuning makes models deny plain reality, and safety training converts behaviour into concealed behaviour rather than removing it.
The empirical record that AI does not merely offload cognition but actively steers it — persuading, completing, flattering, ranking, and bonding — with the ceiling on the claim documented alongside it.
The Behavioural Insights Team as a ratchet method — behavioral science moving from a Cabinet Office desk to a global consultancy, and ’nudge’ sliding from opt-in choice architecture toward fear-based compliance engineering.
A research position. Sourced, present-all-sides, and careful to separate the law that exists from the law that is merely wished for — the electrode is regulated; the feed is not.
Ivanski, Lo, & Mar (2021): A preference for law and order and intolerance for deviance explains why conservatives dislike cats. Conservatism predicted disliking cats but did not predict liking dogs. Social dominance orientation was not the mechanism.
Where Book 4 lands. Biometric enrolment, genetic databases sold in bankruptcy court, health data, brain-computer interfaces, and screening decisions made before a person exists.
The first over-the-counter glucose monitor, cleared for people who are not sick; the least-invasive brain implant on the market and what its 510(k) does and does not allow; and the hospital where more than one company’s brain data is collected. FDA records first, with the clearance numbers checked against the database.
The opioid crisis ran on a data product: prescriber-level records bought from the broker market, used to point a scaled sales force at the highest-volume prescribers — the targeted-marketing mechanism behind OxyContin, sourced to the court record, a Senate hearing, a state AG complaint, and the peer-reviewed literature.
The first human to live with a Neuralink brain implant, in his own words — what the N1 device restored, the thread-retraction complication, and the named-expert critiques of neural-data privacy and trial transparency.
The documented Chinese control-infrastructure record — social credit, the CCTV state, the surveillance majors, Xinjiang, e-CNY, and the export footprint — sourced to primary and named-investigative work, as the parallel to the US/UK body-control stack.
The receipts for the body layer of the control grid — biometric ID, identity-tied CBDC, brain-computer interfaces, genetic databases, programmable molecular platforms, and continuous monitoring — each advancing program paired with its own documented limit.
How a reproductive trajectory once private to adults became a routed transaction across a vendor stack — algorithmic child-welfare scoring, polygenic embryo screening, genetic-database property fights, biometric identity gating, clinical AI selection, and the ‘good genes’ rhetoric around it — each layer sourced, with contested efficacy claims kept attributed to the company that makes them.
How the Chapter 11 bankruptcy of 23andMe transferred roughly 15 million customer genetic profiles to a founder-controlled nonprofit through a court-supervised sale rather than individual re-consent.
The Health-Governance Ratchet is structurally distinct from the US/UK revolving-door Ratchets. It operates via philanthropic funding determinism + institutional embedding, not personnel circulation.
78.8 million records. DOJ indicted Fujie Wang (May 2019) — spear-phishing, Sakula malware, lateral movement over months. Names, SSNs, medical IDs, employment info, income data. Same malware tools (Sakula, Mivast/Derusbi) used exclusively by Chinese APT campaigns.
Flo Health FTC settlement: Shared data from millions of users with Facebook, Google despite privacy promises. Didn’t stop until 2019 WSJ exposé. FTC finalized order June 2021. In 2025, Google paid $48M, Flo $8M, and Flurry $3.5M (total $59.5M).