The four sites were named in a press release issued by Internet privacy service provider Interhack Corp., Columbus, Ohio.
Until yesterday, the four e-tailer's privacy statements affirmed that customer data was not shared with third parties while, in reality, personal information was forwarded to Coremetrics.
Toys 'R' Us has yet to change its privacy policies for its Toysrus.com and Babiesrus.com e-tail sites. Sports gear site Fusion.com has not updated its privacy statement either.
The Lucy.com and Fusion.com sites both bear the TrustE "trustmark." TrustE, a privacy group that issues seals to Web sites committed to customer privacy, is investigating the matter.