Tower Records Agrees to Fix Privacy Flaw

Share this article:
Tower Records will repair a defect in its Web site that let users view personal information about other customers, the Federal Trade Commission said yesterday.


Users were able to access customer order histories, names, billing, shipping and e-mail addresses and phone numbers on TowerRecords.com. The problem arose after Tower redesigned the site and introduced the flaw, the FTC said.


Consumers who purchased from the site received a confirmation e-mail informing them that they could check the status of their order by entering their order number, according to the FTC. However, users discovered that anyone could enter any order number, even if they had not placed the order themselves, and look at the status of other users' orders and their personal information. The flaw was posted in Internet bulletin boards and chat rooms, and 5,000 people had their personal information exposed, the FTC said.


The Web site's privacy policy stated that Tower Records used "state-of-the-art technology" to secure personal information and that password protection prevented access to the information without authorization, according to the FTC.


The FTC charged Tower Records with making false privacy assurances. To settle the complaint, Tower must establish a comprehensive information security program and submit it to an audit by an independent security professional within six months, repeating the audit every other year for 10 years.


Share this article:
close

Next Article in Multichannel Marketing

Sign up to our newsletters

Follow us on Twitter @dmnews

Latest Jobs:

More in Multichannel Marketing

Nielsen Allies With Pointlogic on Cross-Channel Planning

Nielsen Allies With Pointlogic on Cross-Channel Planning

Aim is to develop a "next generation" media planning tool.

If Only Engendering Loyalty Was as Easy as Clicking Your Heels

If Only Engendering Loyalty Was as Easy as ...

Rack Room Shoes combines data, research, and mobile email to deliver a high-heeled digital loyalty program.

Zeta Introduces 'Cross-Lifecycle' Platform

Zeta Introduces 'Cross-Lifecycle' Platform

Zeta Hub aims to help CMOs deliver on ROI goals by extending customer lifecycles.