Most individuals set up browser extensions with out giving them a lot thought. Latest incidents, together with a brand new investigation by LayerX Safety in its Enterprise Browser Extension Safety Report for 2026, recommend that dozens of those instruments accumulate private knowledge and promote it to 3rd events.
The corporate reviewed privateness insurance policies linked to 1000’s of Chrome extensions and recognized 82 that explicitly reserve the correct to promote person knowledge. These will not be hidden malware packages; their knowledge assortment and gross sales practices are acknowledged of their insurance policies.
One group of 24 media-related extensions, in line with LayerX Safety, has reached round 800,000 installations. These extensions are linked to the High quality Viewership Initiative, or QVI, described as a collaborative effort geared toward enhancing streaming high quality by forcing greater resolutions reminiscent of 1080p on Chrome.
Researchers, nevertheless, discovered that these instruments monitor exercise throughout platforms, together with Netflix, Hulu, Disney+, and Amazon Prime Video. The information collected contains viewing historical past, content material preferences, subscription standing, downloaded objects, and streaming conduct.
In some circumstances, the extensions additionally infer age and gender by matching person electronic mail addresses with third-party demographic databases when that data shouldn’t be instantly supplied.
LayerX Safety’s report, shared with Hackread.com forward of publishing on Monday, additionally discovered that 12 ad-blocking extensions have a mixed person base of greater than 5.5 million and observe an analogous mannequin of gathering and promoting searching knowledge. Almost 50 extra Chrome extensions account for over 100,000 customers whereas monetizing basic net exercise. In complete, the confirmed circumstances have an effect on a minimum of 6.5 million customers.
Additional evaluation reveals that 29 of the 82 Chrome extensions function as gross sales intelligence instruments. These can seize inside searching exercise, together with visits to firm methods, SaaS platforms, and analysis workflows, and feed that knowledge into business datasets accessible to consumers.
Outcome? On a regular basis customers find yourself with their leisure selections and on-line habits being offered to advertisers, in the meantime firms face publicity when comparable extensions attain worker units.
On the time of writing, researchers have recognized 82 distinctive extensions throughout 94 retailer listings. Of those, 75 stay stay on the Chrome Net Retailer, whereas solely 7 have been eliminated to this point.
It’s advisable to keep away from putting in browser extensions or plugins that provide restricted worth whereas gathering person knowledge. Keep on with instruments which are verified and listed on a service’s official web site. You probably have any QVI-related extensions put in on Chrome, evaluate them right here and take away any that aren’t essential.
