Wells Fargo, Meta, Google, Boeing, Ubiquiti, UBS and Johnson & Johnson provide seven documented examples of corporate ethics controversies reaching courts or regulators. Their records involve different conduct, jurisdictions and outcomes. A settlement, a regulatory penalty and a criminal conviction are not interchangeable.
This is a selected case guide, not a ranking of the world's least ethical companies or the largest fines in 2026. Some cases are much older. We reviewed the linked records on 8 October 2026 and distinguish the event date from the review date. The aim is to help you understand what each record establishes—and what it does not.
The seven cases at a glance
| Company and current research | Selected record | Date | Important distinction |
|---|---|---|---|
| Wells Fargo | CFPB order: more than $2 billion in consumer redress and a $1.7 billion penalty | 2022 | Compensation and a penalty serve different purposes. |
| Meta | $1.4 billion Texas biometric-data settlement | 2024 | This is not the separate Illinois facial-recognition case. |
| Google / Alphabet | Approximately €2.4 billion Google Shopping fine upheld on appeal | 2017 fine; 2024 appeal judgment | The appeal did not create a second fine. |
| Boeing | Rejected plea proposal, then non-prosecution agreement and dismissal | 2024–2026 procedural history | The rejected proposal is not a conviction awaiting sentence. |
| Ubiquiti | $504,225 OFAC settlement | 2014 | An older sanctions case, not a recent three-year penalty. |
| UBS | $19.5 million SEC resolution over structured-note disclosures | 2015 | The total includes disgorgement, interest and a civil penalty. |
| Johnson & Johnson | Announced $700 million multistate talc-marketing settlement | 2024 | The announcement concerned consumer-protection claims, not every individual injury lawsuit. |
Case-specific sources and qualifications follow. We have not converted currencies or added unrelated cases into a single “ethical damage” total.
1. Wells Fargo: consumer harm and the meaning of remediation
The CFPB's December 2022 order identified problems in auto loans, mortgages and deposit accounts. It required more than $2 billion in consumer redress and a separate $1.7 billion civil penalty. These are different components of the resolution, rather than one undifferentiated fine. CFPB case record.
Subsequent developments matter too. In June 2025, the Federal Reserve removed the asset-growth restriction imposed in 2018 after concluding that the required conditions for that removal had been met. Its announcement said the order's other provisions remained until their termination conditions were satisfied. That dated announcement does not establish how many orders are open today. Federal Reserve decision.
What to examine: both the original harm and the documented remediation. Ending a restriction does not erase the past; continuing to describe a removed restriction as current is also misleading.
2. Meta: keep the Texas and Illinois cases separate
Texas announced a $1.4 billion settlement with Meta on 30 July 2024 concerning the capture and use of biometric identifiers without the authorisation required by state law. The announcement specifies payment over five years. Texas Attorney General announcement.
Our earlier version incorrectly attributed this amount to Illinois litigation. The jurisdiction matters because it identifies the law, claimant and conduct at issue. A privacy settlement in one state should not be combined with another case as though the same payment resolved both.
What to examine: whose data was involved, which consent obligations applied, and what the resolution requires. A settlement amount alone does not describe all the company's current privacy practices.
3. Google: distinguish a fine from the judgment upholding it
In September 2024, the Court of Justice of the European Union dismissed Google and Alphabet's appeal in the Google Shopping case, upholding the approximately €2.4 billion fine originally imposed in 2017. The case concerned preferential treatment of Google's own comparison-shopping service. Court of Justice summary, case C-48/22 P.
What to examine: the specific competition finding and the procedural timeline. Counting the original fine and its later confirmation separately would double-count one penalty. This judgment is not a decision on every other Google antitrust or privacy dispute.
4. Boeing: the proposed guilty plea was not the final outcome
The DOJ's case record says the court rejected the proposed plea agreement on 5 December 2024. A non-prosecution agreement followed in May 2025, and the district court dismissed the charge on 6 November 2025. The record also reports denial of the victims' representatives' mandamus petitions and rehearing requests in 2026, with the mandate issued in June. DOJ case history and linked court documents.
The earlier description of a July 2024 guilty plea with sentencing pending was therefore wrong. The dismissal does not mean that every concern about aircraft safety was adjudicated in Boeing's favour; it describes the outcome of this particular criminal proceeding.
What to examine: the difference between an agreement proposed by prosecutors, judicial acceptance, and a later resolution. Case status must follow the docket rather than the first headline.
5. Ubiquiti: a real sanctions settlement, dated correctly
OFAC's March 2014 notice says Ubiquiti agreed to pay $504,225 to settle potential civil liability for apparent violations of Iranian sanctions regulations. The notice describes the conduct and factors considered in the resolution. OFAC settlement notice.
What to examine: this is a historical compliance case. It cannot truthfully be listed as a penalty from the past three years in a 2026 article. Nor is a reported value of product shipments interchangeable with a regulatory fine. Any later allegations require their own evidence and response.
6. UBS: settlement components and historical context
The SEC's $19.5 million UBS resolution was announced in October 2015. It concerned misleading disclosures about structured notes linked to a currency index. The total comprised $11.5 million in disgorgement and prejudgment interest plus an $8 million civil penalty. UBS settled without admitting or denying the SEC's findings. SEC announcement and order.
What to examine: the disclosure failure and remedy, with the correct date. It is not a recent $19.5 million fine. UBS's later acquisition of Credit Suisse does not make this specific 2015 case a Credit Suisse liability.
7. Johnson & Johnson: the scope of a talc-marketing settlement
In June 2024, California's Attorney General announced a $700 million multistate settlement concerning allegations that Johnson & Johnson misrepresented the safety of talc-based products. The announcement described a proposed settlement subject to court approval. California Attorney General announcement.
That source should be identified by its procedural stage. We do not use it to claim that all personal-injury claims were resolved or that every alleged medical effect was established in a final judgment.
What to examine: which claims an agreement covers, what remains outside it, and whether the document is an announcement, filed agreement or court order.
How to use these records when comparing companies
A useful review asks five questions: what happened, which source establishes it, when it happened, what legal status it reached, and what changed afterwards. Company size, jurisdictions and enforcement intensity also affect the public record. More visible proceedings do not automatically mean more harm per customer, worker or product.
Use the company-score links above to explore wider evidence across Mashinii's ethical dimensions. Our methodology explains the assessment process. Scores are analytical assessments, not judicial findings, and a policy or positive programme does not cancel a specific adverse finding.
For related context, see ESG ratings versus independent evidence and our S&P 500 research. These seven examples are a starting point for examining evidence, not a complete legal history or an investment recommendation.
Correction and review, 8 October 2026: changed the promised count from ten to seven, corrected Meta's jurisdiction and Boeing's procedural history, dated the older Ubiquiti and UBS cases, and removed unsupported aggregate penalty totals and static scores.
Keep reading
Browse all research →Keep asking better questions about companies.
Get one useful company story each week: ownership explainers, comparisons and new findings, with the sources. The Evidence Brief is free.