34/47
Microsoft
2002
2003
2004
2005
2006
2007
2008
2009
2010
2011
2012
2013
2014
2015
2016
2017
2018
2019
2020
2021
2022
2023
2024
James V Grago Jr. (ClixSense)
ENDURING CHANGES
GUESS
CONSUMER SERVICE PROVIDER
Case-specific changes
MTS INC
07/02/2019
PETCO
BJ's Wholesale Club
ClixSense is an online rewards website.
The FTC complaint alleged that they engaged in unfair and deceptive practices because, despite their claims that they utilized the latest security and encryption techniques to secure consumers’ personal information, ClixSense downloaded a harmful browser extension onto its network and failed to use a virtual machine to segregate the software from its network credentials or consumers’ personal information, leading to hackers exploiting the extension to access consumers information on ClixSense’s website, publish the information and offer for it for sale, including 2.7 million consumers’ names, addresses, genders, birth fates, email addresses, passwords, and answers to security questions.
James V Grago Jr.
D-link
DLink
33/47
Microsoft
2002
2003
2004
2005
2006
2007
2008
2009
2010
2011
2012
2013
2014
2015
2016
2017
2018
2019
2020
2021
2022
2023
2024
Uber
ENDURING CHANGES
GUESS
CONSUMER SERVICE PROVIDER
Case-specific changes
MTS INC
10/26/2018
PETCO
BJ's Wholesale Club
Uber is a mobile application that connects drivers with those seeking rides.
The FTC complaint alleged that they engaged in deceptive practices because, despite their claim that they had implemented reasonable security to protect consumer information stored in Uber’s databases, they failed to do so, such as by failing to encrypt consumer information stored in the Amazon S2 Datastore and failing to require engineers that accessed the Datastore to use distinct access keys, leading to two separate data breaches in which hackers obtained the personal information of Uber drivers and riders.
Lenovo
Blu Products
Uber
DLink
32/47
Microsoft
2002
2003
2004
2005
2006
2007
2008
2009
2010
2011
2012
2013
2014
2015
2016
2017
2018
2019
2020
2021
2022
2023
2024
Blu Products
ENDURING CHANGES
GUESS
Device and Device Software
Case-specific changes
MTS INC
09/10/2018
PETCO
BJ's Wholesale Club
Blu Products is a mobile device manufacturer.
The FTC complaint alleged that they engaged in deceptive practices because, despite their claim that they had implemented appropriate physical, electronic, and managerial security procedures to protect consumers' personal information, preinstalled software on Blu’s devices contained commonly known security vulnerabilities such as "command injection" vulnerabilities, potentially allowing attackers to gain access to consumers devices, install malicious applications, and take screenshots and video recordings.
Lenovo
Blu Products
Uber
DLink