34 karma · joined December 5, 2016
If you're passionaite about making the world a better place and have any input in the coding bootcamps then please do ping me.
On August 13, 2026, the CalPrivacy Board ordered Boston-based Cybba, Inc. to pay a $52,400 fine for failing to register with the state’s Data Broker Registry by the 2025 deadline. The company sells personal information—including geolocation data, internet activity data, and inferences—primarily to support targeted advertising. One of its services analyzes purchasing behavior signals to identify likely repeat customers and other high-intent buyers.
Privacy Software company covers rise in litigation.
The major scandal started over allegedly fake SOC 2 audits, fabricated compliance evidence, and stolen open-source code, and that it has now parted ways with Y Combinator. It portrays the company as initially celebrated, then rapidly unraveling after anonymous investigations raised claims that most of its audit reports were nearly identical and that its enterprise product may have been a fork of open-source software without proper attribution.
The core accusation is that Delve generated hundreds of SOC 2 reports that were effectively templated, with the same wording, typos, and conclusions repeated across clients. The piece also says customers were allegedly shown compliance evidence that was fabricated or prewritten before auditors reviewed anything. In addition, it claims Delve marketed itself as more automated and credible than it really was, which made the situation look less like sloppy compliance and more like deliberate fraud.
Code theft claim
A second major allegation is that Delve’s “Pathways” workflow product was a modified version of the open-source tool SimStudio, allegedly sold without attribution despite Apache 2.0 licensing requirements. The article says Delve hired outside developers to maintain it and presented it as built internally, which intensified criticism around both ethics and licensing. This part of the story broadened the scandal beyond compliance fraud into possible IP misuse.
The backlash was immediate: the story spread quickly, investors and supporters distanced themselves, Delve disabled parts of its demo pipeline, and Y Combinator cut ties with the company. The overall tone is that Delve went from high-profile startup to cautionary tale almost overnight.
Captain Compliance a leader in data privacy software solutions provides an analysis.