The fallout from AOL's unintended release of personal search data of 658,000 subscribers could include fines, lawsuits, and changes in law and policy regarding search queries.
AOL's release of subscribers' search data is an unprecedented event that could spark a change in Internet privacy rules or it could spark a series of lawsuits, according to experts.
Andrew Weinstein, AOL spokesperson, said during an interview Wednesday that the company's research team ignored internal policies by deciding to publish search terms on an open Web site designed to help academics. They did not vet their plan through AOL's privacy team, he said. They attached the information to user identification numbers intended to protect subscribers' anonymity.
Some users had searched their own names, telephone numbers and other information that, when combined, can be used to identify them.
During an interview Wednesday, Aftab described the people at AOL as being among the most trustworthy in the industry and said the release of information was uncharacteristic for a company that helped draft best practices. Still, she said that, if the Federal Trade Commission (FTC) finds that AOL violated its privacy agreement, it could fine the company.
"There could be really serious consequences," she said. "The lawyers and regulators will be all over this. The FTC has given fines in the millions of dollars for breaching privacy, but the real cost is going to be the brand."
Aftab said the very actions she takes to protect her privacy could have resulted in the publication of previously undisclosed facts. She said she searches her name, social security number, cell phone number and other data to make sure it has not been published on the Web.
In addition to searches that centered on health, financial and other carefully guarded topics, the data included taboo subjects like incest, masturbation and bestiality. Though AOL removed the information, mirror sites copied the data, which includes searches for anonymous help groups like Alcoholics Anonymous, as well as queries on issues like
How Enterprises Are Attacking the IT Security EnterpriseTo learn more about what organizations are doing to tackle attacks and threats we surveyed a group of 300 IT and infosec professionals to find out what their biggest IT security challenges are and what they're doing to defend against today's threats. Download the report to see what they're saying.
Infographic: The State of DevOps in 2017Is DevOps helping organizations reduce costs and time-to-market for software releases? What's getting in the way of DevOps adoption? Find out in this InformationWeek and Interop ITX infographic on the state of DevOps in 2017.
Digital Transformation Myths & TruthsTransformation is on every IT organization's to-do list, but effectively transforming IT means a major shift in technology as well as business models and culture. In this IT Trend Report, we examine some of the misconceptions of digital transformation and look at steps you can take to succeed technically and culturally.