New York-based online bookseller Barnes & Noble.com
has been slapped with a $60,000 fine after a flaw exposed sensitive customer data
on its Web site.
As part of a settlement with New York State attorney General Eliot
Spitzer, Barnes & Noble.com will pay the fine and establish an
information security program to protect personal information collected
during e-commerce operations.
The book retailer has also agreed to establish management oversight and
employee training programs and hire an external auditor to monitor
compliance with the security program. - Barnes & Noble::
Get the Top 10 Bestsellers for more than 300 Book Subjects Barnes & Noble, Inc. Careers at B&N. Affiliate Network. Corporate, Government & Libraries
http://www.barnesandnoble.com/bestsellers/top10everything.asp?z=yHOME |
Start the Year Right - Barnes & Noble::
Make 2008 the Year You Get in Shape. The 12 Second Sequence by Barnes & Noble, Inc. Careers at B&N. Affiliate Network. Corporate, Government & Libraries
http://www.barnesandnoble.com/collection/index.asp?PID=20962&z=y&cds2Pid=16444&linkid=1084105HOME |
Exposure of sensitive customer data is a recurring problem faced by
e-commerce firms. Malicious attackers are a constant threat and design flaws
to e-commerce software are always a risk.
In fact, it was a design flaw in Barnes & Noble.com's Web site that led
to the exposure of sensitive customer information, including names, billing
addresses and account information. In this case, Spitzer's office said
credit card numbers were not divulged. Cookbooks, Food & Wine: Recipes, TV Cooks, Healthy Meals, Gourmet ::
Barnes & Noble: Find the best cookbooks and wine guides, recipes for healthy Barnes & Noble, Inc. Careers at B&N. Affiliate Network. Corporate, Government
http://www.barnesandnoble.com/subjects/cooking/index.asp?z=yHOME |
Summer Getaway - Barnes & Noble::
Catch Up with the Classics. Coming to a Theater Near You. Get Out Barnes & Noble, Inc. Careers at B&N. Affiliate Network. Corporate, Government & Libraries
http://www.barnesandnoble.com/summer/index.asp?PID=15457HOME |
During an investigation, the New York attorney general said the design
vulnerability "permitted unauthorized access to consumers' accounts and
personal information and enabled users to make purchases on the site from
consumers' accounts."
The flaw arose from Barnes & Noble.com's use of "cookie-less" shopping, a
feature that avoids the use of "cookies" (define). Cookies are
normally used by Web sites to identify users and sometimes prepare customized
Web pages for them.
"In certain situations (such as a consumer forwarding or posting a web
page link), the consumer information in the URL was inadvertently posted or
forwarded to third parties," the AG's office said.
"Consumers are concerned about how their personal information is secured
and protected by online merchants. Our effort here should help assure that
the terms of Barnes and Noble's Internet privacy policy are met."
Pre-Article:Q&A: Scot Melland, CEO, Dice
Next-Article:Apple Sings a Happy iTune
|
HOME