Sears, FTC settle spyware accusations

Sears Holdings Corp. has settled with the Federal Trade Commission (FTC) over charges that it failed to "adequately disclose" that it was collecting the personal information of customers through a software download.

Under the agreement, Sears said it would stop collecting the confidential data of consumers and destroy any information it had previously amassed.

The charges stemmed from an application that Sears paid Sears.com and Kmart.com customers $10 to download. The software was supposed to only track their online browsing habits, but actually collected confidential information, such as online bank statements and drug prescription records.

"Only in a lengthy user license agreement, available to consumers at the end of a multistep registration process, did Sears disclose the full extent of the information the software tracked," the FTC said in a news release issued Thursday.

Sears, in a statement, said it never disclosed any of the data obtained during the "research project," which took place two years ago. The company said it destroyed all information at the end of the project.

"Sears Holdings takes the safety and security of our customers' private information very seriously," the statement said. "The research project was completed over a year ago and no further similar studies have been conducted since, nor are any planned going forward."


Sign up to our newsletters

More in News

Bitcoin mining botnet has become one of the most prevalent cyber threats

Fortinet researchers have tracked 100,000 new ZeroAccess trojan infections per week, making the botnet very lucrative to its owners.

House Intelligence Committee OKs amended version of controversial CISPA

House Intelligence Committee OKs amended version of controversial ...

Despite the 18-to-2 vote in favor of the bill proposal, privacy advocates likely will not be satisfied, considering two key amendments reportedly were shot down.

Judge rules hospital can ask ISP for help in ID'ing alleged hackers

Judge rules hospital can ask ISP for help ...

The case stems from two incidents where at least one individual is accused of accessing the hospital's network to spread "defamatory" messages to employees.