Security and GDPR investigations by The Squad, published in full after each disclosure. https://rfi-irfos.com/evidence/ 2026-10-22T00:00:00Z RFI-IRFOShttps://rfi-irfos.com/ https://rfi-irfos.com/evidence/bigo/ 2026-10-22T00:00:00Z 2026-10-22T00:00:00Z

Privacy and security findings for BIGO LIVE (package sg.bigo.live): highest severity: critical. Disclosed 2026-10-22. Resolved. By RFI-IRFOS.

https://rfi-irfos.com/evidence/runna/ 2026-10-22T00:00:00Z 2026-10-22T00:00:00Z

GDPR and security disclosure report for RunBuddy / Runna: highest severity: critical, 4 cited legal provisions. Disclosed 2026-10-22. By RFI-IRFOS.

https://rfi-irfos.com/evidence/dundle/ 2026-10-04T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for Dundle (package com.dundle.app): highest severity: high, 4 cited legal provisions. Disclosed 2026-10-04. Resolved.

https://rfi-irfos.com/evidence/ivie/ 2026-10-04T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for ivie (package at.vienna.ivie): highest severity: high, 4 cited legal provisions. Disclosed 2026-10-04. Resolved. By RFI-IRFOS.

https://rfi-irfos.com/evidence/magellantv/ 2026-10-04T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for MagellanTV (package com.abide.magellantv): highest severity: high, 5 cited legal provisions. Disclosed 2026-10-04. Resolved.

https://rfi-irfos.com/evidence/paylife/ 2026-10-04T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for PayLife SESAM (package at.paylife.sesam): highest severity: high, 4 cited legal provisions. Disclosed 2026-10-04. Resolved.

https://rfi-irfos.com/evidence/traderepublic/ 2026-10-04T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for Trade Republic (package de.traderepublic.app). Disclosed 2026-10-04. Resolved.

https://rfi-irfos.com/evidence/bluecode/ 2026-10-03T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for Bluecode (package com.spt.bluecode): highest severity: high, 5 cited legal provisions. Disclosed 2026-10-03. Resolved.

https://rfi-irfos.com/evidence/sumup/ 2026-10-03T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for SumUp Business (package com.kaching.merchant). Disclosed 2026-10-03. Resolved.

https://rfi-irfos.com/evidence/visa/ 2026-10-03T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for Visa (Go + Tap to Pay Ready) (package com.visa.eva). Disclosed 2026-10-03. Resolved.

https://rfi-irfos.com/evidence/weplay/ 2026-10-01T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for WePlay (SG) (package com.wejoy.weplay.us). Disclosed 2026-10-01. Resolved.

https://rfi-irfos.com/evidence/binance/ 2026-09-30T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for Binance (package com.binance.dev): highest severity: high, 4 cited legal provisions. Disclosed 2026-09-30. Resolved.

https://rfi-irfos.com/evidence/coinbase/ 2026-09-30T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for Coinbase (package com.coinbase.android): highest severity: critical, 4 cited legal provisions. Disclosed 2026-09-30. Resolved.

https://rfi-irfos.com/evidence/deepseek/ 2026-09-30T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for DeepSeek (package com.deepseek.chat): highest severity: critical, 10 cited legal provisions. Disclosed 2026-09-30. Resolved.

https://rfi-irfos.com/evidence/perplexity/ 2026-09-30T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for Perplexity (package ai.perplexity.app.android). Disclosed 2026-09-30. Resolved.

https://rfi-irfos.com/evidence/fritz/ 2026-09-29T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for FRITZ! Smart Home (package de.avm.android.smarthome). Disclosed 2026-09-29. Resolved.

https://rfi-irfos.com/evidence/kicker/ 2026-09-29T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for kicker (package com.netbiscuits.kicker): highest severity: high, 3 cited legal provisions. Disclosed 2026-09-29. Resolved.

https://rfi-irfos.com/evidence/kronesport/ 2026-09-29T00:00:00Z 2026-10-17T00:00:00Z

GDPR and security disclosure report for Krone Sport: highest severity: high, 4 cited legal provisions. Disclosed 2026-09-29. Resolved. By RFI-IRFOS.

https://rfi-irfos.com/evidence/laola1/ 2026-09-29T00:00:00Z 2026-10-17T00:00:00Z

GDPR and security disclosure report for LAOLA1: highest severity: high, 3 cited legal provisions. Disclosed 2026-09-29. Resolved. By RFI-IRFOS.

https://rfi-irfos.com/evidence/logos/ 2026-09-29T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for Logos Bible (package com.logos.androidlogos). Disclosed 2026-09-29. Resolved.

https://rfi-irfos.com/evidence/magenta-smarthome/ 2026-09-29T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for Magenta SmartHome (package de.telekom.smarthomeb2c). Disclosed 2026-09-29. Resolved.

https://rfi-irfos.com/evidence/mueller/ 2026-09-29T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for Müller (helloagain) (package at.helloagain.muellerde). Disclosed 2026-09-29. Resolved.

https://rfi-irfos.com/evidence/orf/ 2026-09-29T00:00:00Z 2026-10-17T00:00:00Z

RFI-IRFOS GDPR/security disclosure report for ORF TVthek, ORF Ö3, ORF Radio Burgenland, ORF Radio Kärnten, ORF Radio Niederösterreich, ORF Radio Oberösterreich…

https://rfi-irfos.com/evidence/primevideo/ 2026-09-29T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for Amazon Prime Video (package com.amazon.avod.thirdpartyclient). Disclosed 2026-09-29. Resolved.

https://rfi-irfos.com/evidence/redbullesim/ 2026-09-29T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for Red Bull Mobile eSIM (package com.redbull.android.esim). Disclosed 2026-09-29. Resolved.

https://rfi-irfos.com/evidence/spinwinera/ 2026-09-29T00:00:00Z 2026-07-07T00:00:00Z

RFI-IRFOS GDPR/security disclosure report for Spinwinera / Roobet / BetOnRed network. Disclosed 2026-09-29. Resolved.

https://rfi-irfos.com/evidence/swiplus/ 2026-09-29T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for SWIplus (SRG SSR) (package ch.swissinfo.android). Disclosed 2026-09-29. Resolved.

https://rfi-irfos.com/evidence/yesim/ 2026-09-29T00:00:00Z 2026-10-17T00:00:00Z

GDPR and security disclosure report for Yesim eSIM: highest severity: high, 3 cited legal provisions. Disclosed 2026-09-29. Resolved. By RFI-IRFOS.

https://rfi-irfos.com/evidence/aboutyou/ 2026-09-28T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for About You / AY Outlet (package de.aboutyou.outlet.app). Disclosed 2026-09-28. Resolved.

https://rfi-irfos.com/evidence/action/ 2026-09-28T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for Action (package com.action.consumerapp): highest severity: critical, 5 cited legal provisions. Disclosed 2026-09-28. Resolved.

https://rfi-irfos.com/evidence/ardmediathek/ 2026-09-28T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for ARD Mediathek (package de.swr.avp.ard): highest severity: critical, 4 cited legal provisions. Disclosed 2026-09-28. Resolved.

https://rfi-irfos.com/evidence/asos/ 2026-09-28T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for ASOS (package com.asos.app): highest severity: critical, 8 cited legal provisions. Disclosed 2026-09-28. Resolved.

https://rfi-irfos.com/evidence/autoscout/ 2026-09-28T00:00:00Z 2026-10-17T00:00:00Z

GDPR and security disclosure report for AutoScout24: highest severity: critical, 6 cited legal provisions. Disclosed 2026-09-28. Resolved. By RFI-IRFOS.

https://rfi-irfos.com/evidence/boschsmarthome/ 2026-09-28T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for Bosch Smart Home (package com.bosch.sh.ui.android). Disclosed 2026-09-28. Resolved.

https://rfi-irfos.com/evidence/characterai/ 2026-09-28T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for Character.AI (package ai.character.app): highest severity: critical, 6 cited legal provisions. Disclosed 2026-09-28. Resolved.

https://rfi-irfos.com/evidence/crunchyroll/ 2026-09-28T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for Crunchyroll (package com.crunchyroll.crunchyroid). Disclosed 2026-09-28. Resolved.

https://rfi-irfos.com/evidence/decathlon/ 2026-09-28T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for Decathlon (package com.decathlon.app): highest severity: critical, 5 cited legal provisions. Disclosed 2026-09-28. Resolved.

https://rfi-irfos.com/evidence/f1tv/ 2026-09-28T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for F1 TV (package com.formulaone.production). Disclosed 2026-09-28. Resolved.

https://rfi-irfos.com/evidence/hot/ 2026-09-28T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for Mein HoT (AT) (package com.austrianapps.ventocom.hofer). Disclosed 2026-09-28. Resolved.

https://rfi-irfos.com/evidence/ichat/ 2026-09-28T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for Linky / iChat (package com.aigc.ushow.ichat). Disclosed 2026-09-28. Resolved.

https://rfi-irfos.com/evidence/idaustria/ 2026-09-28T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for ID Austria (AT.GOV) (package at.gv.oe.app). Disclosed 2026-09-28. Resolved.

https://rfi-irfos.com/evidence/idealo/ 2026-09-28T00:00:00Z 2026-10-17T00:00:00Z

GDPR and security disclosure report for idealo: highest severity: critical, 3 cited legal provisions. Disclosed 2026-09-28. Resolved. By RFI-IRFOS.

https://rfi-irfos.com/evidence/ikea/ 2026-09-28T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for IKEA (package com.ingka.ikea.app): highest severity: critical, 3 cited legal provisions. Disclosed 2026-09-28. Resolved.

https://rfi-irfos.com/evidence/immoscout/ 2026-09-28T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for ImmoScout24 AT (package at.is24.android). Disclosed 2026-09-28. Resolved.

https://rfi-irfos.com/evidence/immowelt/ 2026-09-28T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for immowelt (package de.immowelt.android.immobiliensuche). Disclosed 2026-09-28. Resolved.

https://rfi-irfos.com/evidence/kaufland/ 2026-09-28T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for Kaufland (package com.kaufland.Kaufland). Disclosed 2026-09-28. Resolved.

https://rfi-irfos.com/evidence/midea/ 2026-09-28T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for Midea Smart Home (CN) (package com.midea.ai.overseas). Disclosed 2026-09-28. Resolved.

https://rfi-irfos.com/evidence/orfkids/ 2026-09-28T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for ORF Kids! (AT) (package at.orf.kids): highest severity: critical, 5 cited legal provisions. Disclosed 2026-09-28. Resolved.

https://rfi-irfos.com/evidence/smartlife/ 2026-09-28T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for Smart Life (Tuya) (package com.tuya.smartlife). Disclosed 2026-09-28. Resolved.

https://rfi-irfos.com/evidence/spar/ 2026-09-28T00:00:00Z 2026-10-17T00:00:00Z

Privacy and security findings for SPAR Plus (package plus.spar.si): highest severity: critical, 3 cited legal provisions. Disclosed 2026-09-28. Resolved.