Ashley Madison Settles with FTC and State AGs for $1.6 Million

Robinson+Cole Data Privacy + Security Insider
Contact

We have previously reported on the Ashley Madison data breach and subsequent litigation [view related posts here, here, here, and here]. On December 14th, Ashley Madison announced that it has agreed to pay $1.6 million and implement additional security measures to settle claims brought by the Federal Trade Commission (FTC) and multiple state Attorneys General over the data breach that occurred in July of 2015.

The FTC and the AGs allege that Ashley Madison failed to protect the personal information of over 36 million users, 19 million of whom were from the U.S., and that users were deceived into participating on the site with fake profiles of women. In particular, the FTC was critical of Ashley Madison’s use of “fembots,” which impersonal real women on the site which “tricked” users into signing up for paid memberships.

According to the Vermont AG “Creating fake profiles and selling services that are not delivered is unacceptable behavior for any dating website.”

During its investigation, the FTC found that Ashley Madison failed to develop and implement a Written Information Security Program (WISP), did not have reasonable access controls and did not train its employees on data security.

The settlement illustrates the importance of having appropriate data security measures in place, including a WISP, and training employees on data security.

[View source.]

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations. Attorney Advertising.

© Robinson+Cole Data Privacy + Security Insider

Written by:

Robinson+Cole Data Privacy + Security Insider
Contact
more
less

PUBLISH YOUR CONTENT ON JD SUPRA NOW

  • Increased visibility
  • Actionable analytics
  • Ongoing guidance

Robinson+Cole Data Privacy + Security Insider on:

Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
Custom Email Digest
- hide
- hide