The FTC, in an action announced today, has settled charges that Dave & Buster's did not take reasonable steps to protect its customers' credit card information. As a result of the lax security, some customers' credit cards were compromised by a hacker who got into the company computer system, and several hundred thousand dollars in fraudulent charges were made. No doubt the banks that issued the cards are not happy about the bogus charges, but the customers are the real victims here.
The FTC claimed that D&B's failed to:
- Take sufficient measures to detect and prevent unauthorized access to the network.
- Adequately restrict outside access to the network, including access by Dave & Buster’s service providers.
- Monitor and filter outbound data traffic to identify and block the export of sensitive personal information without authorization.
- Use readily available security measures to limit access to its computer networks through wireless access points.
The FTC has filed 27 similar cases against companies that failed to adequately protect consumers' financial information. Keep it up!
If you've been the victim of a company's lax security and your private information has been stolen or compromised, contact me immediately for a free consultation.
-B
No comments:
Post a Comment