Alexa
  • Directory of Taiwan

Consumer data provider ChoicePoint settles with 43 states over data breach

Consumer data provider ChoicePoint settles with 43 states over data breach

ChoicePoint Inc. settled with 43 states and the District of Columbia over allegations it failed to adequately secure consumers' personal information related to a breach of its database it disclosed in 2005.
The Alpharetta, Georgia-based consumer data provider has agreed to adopt significantly stronger security measures, including written certification for access to consumer reports and, in some cases, onsite visits by ChoicePoint to ensure the legitimacy of companies before they are allowed access to personally identifiable information.
The breach involved thieves posing as small business customers who gained access to ChoicePoint's database, possibly compromising the personal information of 163,000 people, according to the Federal Trade Commission.
ChoicePoint will now conduct periodic audits to ensure that companies are using consumer data for legitimate purposes, according to the settlement announced Thursday.
There is no fine, though ChoicePoint will pay $500,000 (euro371,664) for state public education campaigns about identity theft.
"This step marks a historic first _ the first time a data broker has agreed to safeguard certain sensitive publicly available information, including Social Security numbers, using the same credentialing methods as it uses to safeguard private financial information that is protected by law," Connecticut Attorney General Richard Blumenthal said in a statement.
There was no admission of wrongdoing by the company in the settlement, ChoicePoint spokesman Matt Furman said. Seven states, including Georgia, are not part of the settlement, ChoicePoint said. The other states not involved in the settlement are Kansas, New Hampshire, Rhode Island, South Carolina, Utah and Wyoming.
In January 2006, ChoicePoint agreed to pay $15 million (euro11 million) to settle FTC charges that the data warehouser's security and record-handling procedures violated consumers' privacy rights when thieves infiltrated the company's massive database.
The FTC fined the company $10 million (euro7.5 million) _ the biggest fine the agency had ever imposed _ and said that ChoicePoint would pay an additional $5 million (euro3.7 million) to compensate consumers.
The federal government is among ChoicePoint's biggest customers.
ChoicePoint collects data on individuals, including Social Security numbers, real estate holdings and current and former addresses. It has about 19 billion records, and its customers include insurance companies, financial institutions and federal, state and local agencies.
___
On the Net:
http://www.choicepoint.com


Updated : 2021-10-26 04:18 GMT+08:00