Tower Records Agrees to Fix Privacy Flaw

Share this content:
Tower Records will repair a defect in its Web site that let users view personal information about other customers, the Federal Trade Commission said yesterday.


Users were able to access customer order histories, names, billing, shipping and e-mail addresses and phone numbers on TowerRecords.com. The problem arose after Tower redesigned the site and introduced the flaw, the FTC said.


Consumers who purchased from the site received a confirmation e-mail informing them that they could check the status of their order by entering their order number, according to the FTC. However, users discovered that anyone could enter any order number, even if they had not placed the order themselves, and look at the status of other users' orders and their personal information. The flaw was posted in Internet bulletin boards and chat rooms, and 5,000 people had their personal information exposed, the FTC said.


The Web site's privacy policy stated that Tower Records used "state-of-the-art technology" to secure personal information and that password protection prevented access to the information without authorization, according to the FTC.


The FTC charged Tower Records with making false privacy assurances. To settle the complaint, Tower must establish a comprehensive information security program and submit it to an audit by an independent security professional within six months, repeating the audit every other year for 10 years.


Loading links....

Sign up to our newsletters

Company of the Week

Since 1985, Melissa Data has helped thousands of companies clean, correct and complete contact data to better target and communicate with their customers. We offer a full spectrum of data quality solutions, including global address, phone, email, and name validation, identify verification - available for batch or real-time processes, in the Cloud or on-premise. Our service bureau provides dedupe, email/phone append and geographic/demographic append services for better targeting and insight. For direct mailers, Melissa Data offers easy-to-use address management/postal software, list hygiene services and 100s of specialty mailing lists - all with competitive pricing and excellent customer service.

Find out more here »

DMN's Career Center

Check out hundreds of exciting professional opportunities available on DMN's Career Center.  
Explore careers in digital marketing, sales, eCommerce, marketing communications, IT, data strategies, and much more. And don't forget to update your resume so employers can contact you privately about job opportunities.

>>Click Here