Spitzer Alleges Firm Fraudulently Sold Personal Data From Millions
New York Attorney General Eliot Spitzer is suing a company for allegedly selling the personal information of millions of consumers, despite "explicit" promises to the contrary.
New York Attorney General Eliot Spitzer on Thursday sued a Washington, D.C., company for allegedly selling the personal information of millions of consumers. Prosecutors called it the largest deliberate breach of privacy in Internet history.
Gratis Internet Inc. and its owners Peter Martin and Robert Jewell were named in the suit filed in New York State Supreme Court. The defendants are accused of selling lists of millions of Gratis customers to three independent email marketers, despite explicit promises that no personal information would be given to anyone. The suit seeks a court injunction preventing the company from further sales, and seeks penalties under New York's consumer fraud statutes.
The suit stems from an investigation Spitzer launched last year of companies involved in the compilation and sale of marketing lists. Gratis collected customer information on several of its Web sites in exchange for free products, generally received through free trials of other products. The Gratis sites included FreeiPods.com, FreeCDs.com, FreeDVDs.com and FreeVideoGame.com.
From 2000 to 2004, Gratis posted on its Web sites several statements claiming to protect personal information, including one that said, "We well never give out, sell, or lend your name or information to anyone," Spitzer said.
Nevertheless, during 2004 and 2005, Martin and Jewell repeatedly violated those promises by selling customer lists to marketers, who then sent hundreds of millions of email solicitations on behalf of their own cutomers, Spitzer said. In each deal, Gratis shared between 1 million and 7 million confidential user records.
The suit also alleges that Gratis falsely denied such data sharing had occurred. In a written response to Spitzer's investigation, Gratis claimed that "at all times during its existence . . . Gratis has never sold, rented, or lent email addresses or personal information of its users to any third-party and the company has always maintained control over and ownership of such information."
In the suit, Spitzer cites specific data-sharing contracts, as well as testimony and other evidence provided by Internet marketers that did business with Gratis.
Privacy advocates quoted in Spitzer's statement announcing the suit, praised the actions by the attorney general.
"Without strong enforcement, privacy policies are meaningless," Marc Rotenberg, the executive director of the Electronic Privacy Information Center in Washington D.C., said.
Beth Givens, director of the Privacy Rights Clearinghouse, said the suit sends the message that "Deception doesn't pay."
How Enterprises Are Attacking the IT Security EnterpriseTo learn more about what organizations are doing to tackle attacks and threats we surveyed a group of 300 IT and infosec professionals to find out what their biggest IT security challenges are and what they're doing to defend against today's threats. Download the report to see what they're saying.
Infographic: The State of DevOps in 2017Is DevOps helping organizations reduce costs and time-to-market for software releases? What's getting in the way of DevOps adoption? Find out in this InformationWeek and Interop ITX infographic on the state of DevOps in 2017.
Digital Transformation Myths & TruthsTransformation is on every IT organization's to-do list, but effectively transforming IT means a major shift in technology as well as business models and culture. In this IT Trend Report, we examine some of the misconceptions of digital transformation and look at steps you can take to succeed technically and culturally.