The Church of Jesus Christ of Latter-day Saints
Using a prayer or scripture app tells the company your faith, and one policy says outright that it collects your religion by inference. The location it needs for prayer times or a nearby place of worship also feeds ads and analytics. Your giving and your activity go back to your congregation.
Reported incidents
Members' contact details and record numbers taken in a suspected state-backed hack
2022-10-13Affected Church online accounts and membership records
The Church of Jesus Christ of Latter-day Saints said on 13 October 2022 that on 23 March 2022 it had detected unauthorised access to its computer systems, affecting personal data of some members, employees, contractors and friends. The data may include usernames, membership record numbers, full names, gender, email addresses, birthdates, mailing addresses, phone numbers and preferred language. The church said donation history and banking details were not affected. US federal law enforcement asked it to keep the incident confidential until 12 October 2022, and suspects it was part of a pattern of state-sponsored cyberattacks. The church said it had notified relevant data protection authorities.
People affected typically ask The Church of Jesus Christ of Latter-day Saints to confirm whether their information was included, and which categories.
The verified route
DÆTRAX is a personal data accountability ledger: a dated record of which companies hold your personal data, what you asked them to do about it, and what they claimed in reply.