Internet, Information Technology & e-Discovery Blog

Internet, Information Technology & e-Discovery Blog

Social changes brought about by the Internet & Technology

Category Archives: eCommerce

Subscribe to eCommerce RSS Feed

Truste Pays $200,000 Fine for Breaching Contracts to Verify Privacy on 1,000+ Websites & FTC Oversight

Posted in eCommerce, Internet Privacy
“The Federal Trade Commission [FTC] has approved a final order resolving the Commission’s complaint against TRUSTe, Inc. for deceiving consumers about its privacy seal program”as posted on the FTC website on March 18, 2015.  FTC also stated that the Order the FTC will have oversight for 20 years and in particular making sure that Truste complies… Continue Reading

47 State Cybersecurity Breach Laws May be Replaced by Federal Law

Posted in Cyber, eCommerce
At a Senate hearing on cyberinsurance regarding notice to cyber victims there was testimony about a uniform federal cybersecurity breach law to replace the laws in 47 states which could help by having a uniform standard could “reduce the cost of breach responses and enhance consumer protection.”  The Senate Commerce Committee’s Subcommittee on Consumer Protection,… Continue Reading

Cybersecurity Risks for Boards and CEOs – Time to Work More Closely with CIOs and CISOs

Posted in Cyber, eCommerce
Recently there was a report about the Sony breach which stated that as “a result of this pervasive and devastating attack, combined with other breaches, cybersecurity is no longer a CIO problem, but now a CEO and board level problem, given potential for business disruption.” The InformationWeek DarkReading March 11, 2015 report entitled “6 Ways… Continue Reading

Legal Liability for Paying for Online Reviews for Automobile Shipment Broker that Confessed to Astroturfing

Posted in eCommerce
The Federal Trade Commission (FTC) announced a settlement with AmeriFreight “that will halt the company’s allegedly deceptive practice of touting online customer reviews, while failing to disclose that the reviewers were compensated with discounts and incentives.”  The FTC settlement on February 27, 2015 with AmeriFreight (an automobile shipment broker based in Peachtree City, Georgia) was… Continue Reading

No Surprise – Identity Theft Tops FTC Consumer Complaints

Posted in eCommerce, Internet Privacy
The FTC (Federal Trade Commission) reported that ‘identity theft topped the FTC’s national ranking of consumer complaints for the 15th consecutive year.’  On February 27, 2015 the FTC issues its Consumer Sentinel Network for 2014 which identified these Top Ten complaint categories (including the number of complaints and percentages) for 2014: Identity Theft (332,646 -13%)… Continue Reading

Red Flags Employers Should Know about Rogue Employees

Posted in eCommerce
A recent Infoworld story included 7 Red Flags about employees regarding “someone you admired, trusted, and invested yourself in ends up embezzling from the company, illegally accessing private emails, or using customer credit card data to buy computer equipment for their home, your incorrectly placed trust in that person will haunt you.”  The March 2,… Continue Reading

More Cyber Criminals Targeting your Identity, Including Bad Guys in China!

Posted in eCommerce, Internet Privacy
According to a recent report groups in “China continue to target Western interests, but there has been a shift in focus from the theft of intellectual property to identity information” according to BusinessInsurance.com which drew these conclusions from a February 23, 2015 recent HP report entitled “HP Security Research, Cyber Risk Report 2015” which also… Continue Reading

Cybercrime report should be alarming to every Internet user in the world!

Posted in eCommerce
A recent report analyzing cybercrime that infected over 500,000 PCs pointed out that while “the primary targets appear to be financial accounts and online banking information, the group also has a range of options for further monetization of the infected computers.”  The Proofpoint October 2014 report entitled the “Analysis of a Cybercrime Infrastructure” concludes that… Continue Reading

Cyber IT Risk Wake Up Time for Board Members!

Posted in eCommerce, IT Industry
A former SEC Chair spoke at a Directors & Officers (D&O) insurance conference and said board members “should be knowledgeable about data inventories, where data is located and if it is protected, and use third-party services to test its safety” as reported by BusinessInsurance.com.  Mary L. Schapiro (SEC chairman from 2009-2012) currently serves on the… Continue Reading

Cyber Privacy & Security Warning! – Watch out for the 25+ Billion of IoTs (Internet of Things)!

Posted in eCommerce, Internet Privacy
With billions IoT devices now in place, and growing exponentially, apparently IoT manufacturers have not given a great deal of thought to security so the FTC recently urged Best Practices to IoT manufacturers as “part of the security by design process, companies should consider: (1) conducting a privacy or security risk assessment; (2) minimizing the… Continue Reading

10 Cyber security tips all employees need to know, including Phishing Scams & BYOD

Posted in eCommerce, Internet Privacy
Employers want to blame cyberthreats on bad guys but “the threat actually originates from within when employees’ ignorance and/or negligence opens the door for cybercriminals” as reported by Kasperky in “Top 10 Tips for Educating Employees about Cybersecurity.” Phishing Scam advice is included in Tip #4: Phishing remains the primary method for infecting users via… Continue Reading

Cyber Advice to Lawyers: Advanced Persistent Threats (APTs) are directed at your clients!

Posted in eCommerce
According to a recent Kaspersky Lab Report every “corporation, regardless of its size or industry, is at risk of becoming the victim of a targeted attack by a variety of threat actors including APT groups, politically-driven “hacktivists,” and more advanced cybercriminals, who offer their services for hire.” The report entitled “The Evolution of Corporate Cyberthreats”… Continue Reading

Do you have the right cyber insurance?

Posted in eCommerce, Internet Privacy
“Whether a cyber attack is covered by an insurance policy may depend on the motive for the attack and its perpetrator … as this will affect whether clauses and exclusions for cyber insurance can be considered”according to a recent report issued by the CRO Forum which was entitled “Cyber resilience – The cyber risk challenge… Continue Reading

Do you think a consumer website can arbitrate disputes? Maybe not without prior approval

Posted in eCommerce
The American Arbitration Association (AAA) changed its Consumer Arbitration Rules effective Sept. 1, 2014 and now requires AAA pre-approval and annual renewal for Terms of Service that obligate consumers to arbitrate disputes. According to the AAA, “contracts that typically meet the criteria for application of these Rules, if the contract is for personal or household… Continue Reading

New Privacy Risks to your Wifi Passwords with Free Phishing App

Posted in eCommerce, Internet Privacy
Wifiphisher is a new tool created “to launch phishing attacks against users of wireless networks in order to steal their Wi-Fi access keys” according to a January 5, 2015 report in Computerworld. The inventor of Wifiphisher is IT security engineer George Chatzisofroniou who says: Wifiphisher is a security tool that mounts fast automated phishing attacks against… Continue Reading

TripAdvisor Fined $610,000 for Failing to Prevent Astroturfing

Posted in eCommerce
The Italian Competition Authority fined TripAdvisor based on a complaint by an “association of Italian hoteliers and by local consumer protection groups, which claimed that TripAdvisor did not provide accurate reviews for consumers to make informed decisions.”  The New York Times reported that TripAdvisor disagreed: We think the ruling is unreasonable,…We fight fraud aggressively and… Continue Reading

Cyberintrusions Lead to 81+ Million Records Exposed in 2014

Posted in eCommerce, Internet Privacy
The Identity Theft Resource Center (ITRC) defines data breaches when an incident put a risk of exposure of an individual’s “name plus a Social Security number, driver’s license number, medical record or financial record (credit/debit cards included).”  The ITRC Data Breach Report is published every Tuesday and on December 9, 2014 the Report identified 720… Continue Reading