The fallout from AOL's unintended release of personal search data of 658,000 subscribers could include fines, lawsuits, and changes in law and policy regarding search queries.
AOL's release of subscribers' search data is an unprecedented event that could spark a change in Internet privacy rules or it could spark a series of lawsuits, according to experts.
Andrew Weinstein, AOL spokesperson, said during an interview Wednesday that the company's research team ignored internal policies by deciding to publish search terms on an open Web site designed to help academics. They did not vet their plan through AOL's privacy team, he said. They attached the information to user identification numbers intended to protect subscribers' anonymity.
Some users had searched their own names, telephone numbers and other information that, when combined, can be used to identify them.
During an interview Wednesday, Aftab described the people at AOL as being among the most trustworthy in the industry and said the release of information was uncharacteristic for a company that helped draft best practices. Still, she said that, if the Federal Trade Commission (FTC) finds that AOL violated its privacy agreement, it could fine the company.
"There could be really serious consequences," she said. "The lawyers and regulators will be all over this. The FTC has given fines in the millions of dollars for breaching privacy, but the real cost is going to be the brand."
Aftab said the very actions she takes to protect her privacy could have resulted in the publication of previously undisclosed facts. She said she searches her name, social security number, cell phone number and other data to make sure it has not been published on the Web.
In addition to searches that centered on health, financial and other carefully guarded topics, the data included taboo subjects like incest, masturbation and bestiality. Though AOL removed the information, mirror sites copied the data, which includes searches for anonymous help groups like Alcoholics Anonymous, as well as queries on issues like
How Enterprises Are Attacking the IT Security EnterpriseTo learn more about what organizations are doing to tackle attacks and threats we surveyed a group of 300 IT and infosec professionals to find out what their biggest IT security challenges are and what they're doing to defend against today's threats. Download the report to see what they're saying.
5 Top Federal Initiatives For 2015As InformationWeek Government readers were busy firming up their fiscal year 2015 budgets, we asked them to rate more than 30 IT initiatives in terms of importance and current leadership focus. No surprise, among more than 30 options, security is No. 1. After that, things get less predictable.
Top IT Trends to Watch in Financial ServicesIT pros at banks, investment houses, insurance companies, and other financial services organizations are focused on a range of issues, from peer-to-peer lending to cybersecurity to performance, agility, and compliance. It all matters.
Join us for a roundup of the top stories on InformationWeek.com for the week of October 23, 2016. We'll be talking with the InformationWeek.com editors and correspondents who brought you the top stories of the week to get the "story behind the story."