Privacy Tip #141 – Teen Safe App Exposes Parents’ and Teens’ Information

Robinson+Cole Data Privacy + Security Insider
Contact

Admittedly, parents of teens have unique worries about their children. Helicopter parents worry more than others. A perfect app for helicopter parents is Teen Safe. Teen Safe allows those worried parents to monitor their children’s location, text messages, call history, app downloads and browsing history. Yikes—the only monitor I ever had with my kids was a baby monitor for feeding and diaper changes. According to Teen Safe, over one million parents use it to “monitor” their children.

A security researcher last week discovered that the servers of Teen Safe, located on Amazon’s cloud, were left unprotected and were accessible without a password. According to ZDNet, “tens of thousands of parents’ email addresses as well as the teens’ Apple ID email addresses and their passwords” and the teens’ names were accessible on the unprotected servers. Others have reported that some of the teens’ email addresses were associated with their high schools.

Unfortunately, in order to use the app, multi-factor authentication had to be disabled, which allowed hackers to access and exfiltrate the teen’s personal information by only using the teen’s credentials.

The company took its servers offline and is notifying all affected individuals, but right before it did so, it is reported that 10,200 records were accessible.

The tip this week is to ponder using any app that does not allow multi factor authentication, vet the apps that your children and you are using, and consider flying the helicopter a little higher.

[View source.]

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© Robinson+Cole Data Privacy + Security Insider | Attorney Advertising

Written by:

Robinson+Cole Data Privacy + Security Insider
Contact
more
less

PUBLISH YOUR CONTENT ON JD SUPRA NOW

  • Increased visibility
  • Actionable analytics
  • Ongoing guidance

Robinson+Cole Data Privacy + Security Insider on:

Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
Custom Email Digest
- hide
- hide