Google to Delete Incognito Data: $5 Billion Lawsuit

Google’s settlement of a data privacy lawsuit regarding its ‘Incognito’ mode marks a significant development in the ongoing debate over online privacy and data collection. The lawsuit, first filed in 2020, alleged that Google had been secretly collecting data from users who believed they were browsing privately.

The settlement could see Google paying up to $5 billion in damages, or $5,000 per affected user, for violations of federal wiretapping and California privacy laws.

The lawsuit covers millions of Google users who have used private browsing mode since June 1, 2016. These users felt misled, believing that their online activities were safe from tracking and data collection while using Google’s ‘Incognito’ mode. However, it was alleged that Google’s analytics, cookies, and apps allowed the company to improperly track individuals who used ‘Incognito’ mode on the Chrome browser and other browsers set to ‘private’ browsing mode.

As part of the settlement terms, Google has agreed to destroy billions of data records collected through ‘Incognito’ mode. The company will also update its disclosures about what data it collects in ‘private’ browsing and allow ‘Incognito’ users to block third-party tracking cookies by default for the next five years. This move is expected to reduce the amount of data Google collects from users’ private browsing sessions and limit the company’s ability to monetize this data.

The settlement comes after a preliminary agreement reached in December 2023, which averted a scheduled trial in February 2024. Terms of the settlement were not disclosed at the time but have now been filed in a federal court in Oakland, California, and require approval by US District Judge Yvonne Gonzalez Rogers. The settlement could see Google paying out significant sums in damages, although the exact amount will depend on the number of affected users who come forward to claim compensation.

Google has denied any wrongdoing, with a spokesperson stating that the company “never associate[s] data with users when they use Incognito mode.” The settlement marks a significant step in holding technology companies accountable for their privacy practices and could have broader implications for how user data is collected and used online. It also highlights the importance of transparency and consumer trust in the digital age, as users increasingly seek ways to protect their online privacy and data security.

Mayur Joshi
Mayur Joshihttps://riskpro.co.in/mayur-joshi/
Mayur Joshi is a Chartered Accountant and forensic accountant, founder of Indiaforensic Center of Studies and of Riskpro, a risk and compliance firm established in 2008. He is a member of EC-Council’s Global Advisory Board for Computer Forensics. His professional work is in forensic accounting, fraud investigation and anti-money laundering, and he writes on digital threats and cyber security for Newsinterpretation. He is a cyber security expert who contributes on topics such as cyber attacks, information security and hacking.

TOP 10 TRENDING ON NEWSINTERPRETATION

Cyber Attacks on Space Infrastructure: Satellites, GPS and the Ground Systems Behind Them

From the Viasat KA-SAT hack to GPS jamming over the Baltic, a research guide to how attackers target satellites, navigation signals and ground stations, and why it matters on Earth.

How AI Agents Are Used in Cyber Attacks: From Assisted Hacking to AI-Orchestrated Espionage

Attackers now use AI agents to scan networks, write exploits and run extortion campaigns. A research guide to documented cases, including the first reported AI-orchestrated espionage campaign, and what defenders should do.

Cyber Attacks on AI and LLMs: How Attackers Target Large Language Models

Prompt injection, data poisoning, model theft and jailbreaks: a research guide to how attackers target AI systems and large language models, with real cases and defences.

French Supermarket Refrigeration Cyberattack: How Hacking the Cold Chain Can Endanger Lives

In October 2026 attackers heated refrigeration cabinets in hundreds of French supermarkets to as much as 50°C. No one was hurt, but the attack shows how hacking the cold chain can endanger lives through fire, food poisoning and spoiled medicines.

Cyberattacks on Nuclear Facilities: Stuxnet, Kudankulam and the Limits of Air Gaps

Stuxnet, the Davis-Besse worm and malware at India’s Kudankulam plant: what they show about cyber risk at nuclear facilities and the limits of air gaps.

Triton: When Hackers Target the Safety Systems That Prevent Industrial Disasters

The 2017 Triton attack targeted the safety systems that prevent industrial disasters. What happened, who was charged, and how plants protect their last line of defence.

Cybersecurity Risks in Smart Cities: When Connected Infrastructure Fails

How connecting traffic control, emergency alerts and utilities concentrates cyber risk in cities, what the Dallas and Atlanta incidents showed, and what governments recommend.

Weaponized Drones: Hijacking, GPS Spoofing and Emerging Cyber Warfare Risks

How drones can be hijacked, jammed or misled by GPS spoofing, what researchers have demonstrated, and why governments treat drone fleets as a security risk.

Ransomware Attacks on Hospitals: How Healthcare Cyberattacks Put Patients at Risk

How ransomware against hospitals and their suppliers delays care and endangers patients, what the Düsseldorf and WannaCry cases show, and what research says about deaths.

Operational blunder exposes massive Russian cyber espionage attack on Ukrainian prosecutors

A major cyberattack has compromised the email accounts of...

Cyber Attacks on Space Infrastructure: Satellites, GPS and the Ground Systems Behind Them

From the Viasat KA-SAT hack to GPS jamming over the Baltic, a research guide to how attackers target satellites, navigation signals and ground stations, and why it matters on Earth.

French Supermarket Refrigeration Cyberattack: How Hacking the Cold Chain Can Endanger Lives

In October 2026 attackers heated refrigeration cabinets in hundreds of French supermarkets to as much as 50°C. No one was hurt, but the attack shows how hacking the cold chain can endanger lives through fire, food poisoning and spoiled medicines.

Cyberattacks on Nuclear Facilities: Stuxnet, Kudankulam and the Limits of Air Gaps

Stuxnet, the Davis-Besse worm and malware at India’s Kudankulam plant: what they show about cyber risk at nuclear facilities and the limits of air gaps.

Triton: When Hackers Target the Safety Systems That Prevent Industrial Disasters

The 2017 Triton attack targeted the safety systems that prevent industrial disasters. What happened, who was charged, and how plants protect their last line of defence.

Cybersecurity Risks in Smart Cities: When Connected Infrastructure Fails

How connecting traffic control, emergency alerts and utilities concentrates cyber risk in cities, what the Dallas and Atlanta incidents showed, and what governments recommend.

Ransomware Attacks on Hospitals: How Healthcare Cyberattacks Put Patients at Risk

How ransomware against hospitals and their suppliers delays care and endangers patients, what the Düsseldorf and WannaCry cases show, and what research says about deaths.

FBI warns of AVrecon malware targeting outdated routers linked to proxy based cybercrime

A serious cybersecurity warning has been issued regarding commonly...

Related Articles

Popular Categories