Menu
Ashley Madison misled users with a fake security award

Ashley Madison misled users with a fake security award

The site showed the award before getting hit by a massive breach last year, watchdogs say

It’s never a good sign when a website markets itself with a phony security award. But that’s what Ashley Madison did prior to last year’s massive data breach.

On Monday, privacy officials in Canada and Australia found that the Canadian adultery website used deceptive and confusing practices to make customers think the service was secure.

Privacy authorities from both countries have been investigating Ashley Madison following last year’s hack, which exposed personal data on 36 million users, including names, credit card numbers, and in some cases, their sexual fantasies. 

Although Ashley Madison had been promoting discreet extramarital affairs, the site itself used security practices that fell short of accepted standards and privacy laws, the investigation found.

One problem was the use of a medal icon on the website labeled “trusted security award.” The company behind Ashley Madison later admitted that the award was fake and removed it, the privacy officials said.

The officials also took issue with the way Ashley Madison retained user data. The website stored all profile information indefinitely unless users paid for a full deletion -- even if the account had been deactivated. None of this was clearly stated in Ashley Madison’s privacy policy.

Under Canadian and Australian privacy laws, no website should be able to keep user information indefinitely when the account has been deactivated, the investigators said.

On Tuesday, Ashley Madison’s owner, Ruby, agreed to make changes recommended by the investigation. They include providing a no-cost option to delete a users profile. Previously, the company charged 19 Canadian dollars (about US$15).

If the company doesn't comply with the recommendations, Canadian and Australian authorities said they can force their countries' courts to intervene. 

Ruby, formerly known as Avid Life Media, is also undergoing a third-party review to examine its privacy protections and plans to introduce other security measures. Despite last year's breach, the company claims Ashley Madison has 47 million users. 

But even as privacy officials in Canada and Australia have concluded their own probe of the company, the U.S. Federal Trade Commission is also reportedly investigating the Ashley Madison site.


Follow Us

Join the New Zealand Reseller News newsletter!

Error: Please check your email address.

Featured

Slideshows

Sizing up the NZ security spectrum - Where's the channel sweet spot?

Sizing up the NZ security spectrum - Where's the channel sweet spot?

From new extortion schemes, outside threats and rising cyber attacks, the art of securing the enterprise has seldom been so complex or challenging. With distance no longer a viable defence, Kiwi businesses are fighting to stay ahead of the security curve. In total, 28 per cent of local businesses faced a cyber attack last year, with the number in New Zealand set to rise in 2017. Yet amidst the sensationalism, media headlines and ongoing high profile breaches, confusion floods the channel, as partners seek strategic methods to combat rising sophistication from attackers. In sizing up the security spectrum, this Reseller News roundtable - in association with F5 Networks, Kaspersky Lab, Tech Data, Sophos and SonicWall - assessed where the channel sweet spot is within the New Zealand channel. Photos by Maria Stefina.

Sizing up the NZ security spectrum - Where's the channel sweet spot?
Kiwi channel comes together for another round of After Hours

Kiwi channel comes together for another round of After Hours

The channel came together for another round of After Hours, with a bumper crowd of distributors, vendors and partners descending on The Jefferson in Auckland. Photos by Maria Stefina.​

Kiwi channel comes together for another round of After Hours
Consegna comes to town with AWS cloud offerings launch in Auckland

Consegna comes to town with AWS cloud offerings launch in Auckland

Emerging start-up Consegna has officially launched its cloud offerings in the New Zealand market, through a kick-off event held at Seafarers Building in Auckland.​ Founded in June 2016, the Auckland-based business is backed by AWS and supported by a global team of cloud specialists, leveraging global managed services partnerships with Rackspace locally.

Consegna comes to town with AWS cloud offerings launch in Auckland
Show Comments