28/47
Microsoft
2002
2003
2004
2005
2006
2007
2008
2009
2010
2011
2012
2013
2014
2015
2016
2017
2018
2019
2020
2021
2022
2023
2024
ASUSTek
ENDURING CHANGES
GUESS
Device and Device Software
Case-specific changes
MTS INC
07/08/2016
PETCO
BJ's Wholesale Club
ASUStek is a hardware manufacturer that sells products including internet routers.
The FTC complaint alleged that they engaged in unfair and deceptive practices because, despite their claims that they had implemented measures to ensure their routers would protect consumers' networks from attack and that their AiCloud feature and AiDisk were secure means to access consumer information, ASUStek failed to provide reasonable security during the design and the maintenance of the software they developed for their AiDisk, AiCloud, and routers, such as by failing to perform code review and testing of the software, failing to perform penetration and vulnerability testing of the software, and failing to have a process for receiving and responding to vulnerability reports, leading to hackers locating the IP addresses of vulnerable ASUS routers, gaining access to the USB devices of thousands of consumers, and posting the IP Addresses of 12,937 routers and the login information of 3,131 consumers.
ASUSTek
Ashley Madison
DLink
27/47
Microsoft
2002
2003
2004
2005
2006
2007
2008
2009
2010
2011
2012
2013
2014
2015
2016
2017
2018
2019
2020
2021
2022
2023
2024
Wyndham
ENDURING CHANGES
GUESS
CONSUMER RETAILER
Case-specific changes
MTS INC
12/11/2015
PETCO
BJ's Wholesale Club
Wyndham Worldwide is a hospitality business which franchise and manages hotels.
The FTC complaint alleged that they engaged in unfair and deceptive practices because, despite their claim that they had implemented reasonable measures to protect personal information from unauthorized access, they failed to do so such as by allowing software to be configured inappropriate and failing to remedy known security vulnerabilities, leading to hackers accessing Wyndham's computer network three separate times and accessing customers' personal information including credit card information.
Wyndham
DLink
26/47
Microsoft
2002
2003
2004
2005
2006
2007
2008
2009
2010
2011
2012
2013
2014
2015
2016
2017
2018
2019
2020
2021
2022
2023
2024
Snapchat
ENDURING CHANGES
GUESS
SOCIAL MEDIA PLATFORM
Case-specific changes
MTS INC
12/31/2014
PETCO
BJ's Wholesale Club
Snapchat is a mobile social media application.
The FTC complaint alleged that they engaged in deceptive practices because, despite their claim that they had implement reasonable measures to protect consumer information from misuse and unauthorized disclosure, Snapchat failed to verify that the phone number that a user entered into the application belonged to the mobile device being used by that individual and failed to restrict the number of Find Friend requests one account could make, allowing hackers to compile a database of 4.5 million Snapchat usernames and the mobile phone numbers associated with those accounts.
TrendNet
GeneLink Inc
Credit Karma
Fandango
GMR Transcription
Snapchat
DLink