Make us your home page
Instagram

Data breach exposed millions who used Fandango, Credit Karma apps, FTC says

PORTLAND, Ore. — The Federal Trade Commission says the mobile applications of movie ticket seller Fandango and credit report provider Credit Karma may have exposed millions of users' sensitive personal information, including credit card data and Social Security numbers.

The companies failed to properly secure their apps over a multiyear period, potentially exposing information users sent or received, the FTC said.

Fandango and Credit Karma, which fixed the security issue last year, said Friday that they are not aware of any individual's information being compromised. But the FTC said that due to the nature of the types of attacks, it would be nearly impossible to trace.

Fandango, owned by Comcast Corp., and Credit Karma agreed to settle the FTC's charges that they misrepresented the security of their applications and failed to secure information.

As part of the settlements, the companies agreed to establish more comprehensive security programs and undergo independent security assessments every other year for the next 20 years.

Fandango may have exposed consumers' credit card, email address and passwords through its application for Apple's iOS operating system between March 2009 and March 2013, according to the complaint.

Credit Karma's may have exposed consumers' names, Social Security numbers, birth dates, addresses, phone numbers, credit scores and more. This affected its iOS applications used between July 2012 and January 2013. The company also launched an Android version of its app in 2013 without proper security steps, an issue that it later resolved.

The FTC does not have a specific figure of how many people may have been made vulnerable. But it noted in its complaint that Credit Karma's app has been downloaded more than 1 million times and Fandango's has been downloaded more than 18.5 million times.

Data breach exposed millions who used Fandango, Credit Karma apps, FTC says 03/28/14 [Last modified: Friday, March 28, 2014 7:58pm]
Photo reprints | Article reprints

© 2017 Tampa Bay Times

    

Join the discussion: Click to view comments, add yours

Loading...
  1. Federal agencies demand records from SeaWorld theme park

    Tourism

    ORLANDO — Two federal agencies are reportedly demanding financial records from SeaWorld.

    Killer whales Ikaika and Corky participate in behaviors commonly done in the wild during SeaWorld's Killer Whale educational presentation in this photo from Jan. 9. SeaWorld has been subpoenaed by two federal agencies for comments that executives and the company made in August 2014 about the impact from the "Blackfish" documentary. 
[Nelvin C. Cepeda/San Diego Union-Tribune/TNS]
  2. Legalized medical marijuana signed into law by Rick Scott

    State Roundup

    TALLAHASSEE — Gov. Rick Scott on Friday signed into law a broader medical marijuana system for the state, following through on a promise he made earlier this month.

    Gov. Rick Scott signed legislation on Friday that legalizes medical marijuana in Florida.
  3. Line of moms welcome Once Upon A Child to Carrollwood

    Business

    CARROLLWOOD — Strollers of all shapes and sizes are lined up in front of the store, and inside, there are racks of children's clothing in every color of the rainbow.

    At Once Upon A Child, you often as many baby strollers outside as you find baby furniture and accessories. It recently opened this location in Carrollwood. Photo by Danielle Hauser
  4. Pastries N Chaat brings North India cuisine to North Tampa

    Business

    TAMPA — Pastries N Chaat, a new restaurant offering Indian street food, opened this week near the University of South Florida.

    The menu at Pastries N Chaat includes a large variety of Biriyani, an entree owners say is beloved by millions. Photo courtesy of Pastries N Chaat.
  5. 'Garbage juice' seen as threat to drinking water in Florida Panhandle county

    Water

    To Waste Management, the nation's largest handler of garbage, the liquid that winds up at the bottom of a landfill is called "leachate," and it can safely be disposed of in a well that's 4,200 feet deep.

    Three samples that were displayed by Jackson County NAACP President Ronstance Pittman at a public meeting on Waste Management's deep well injection proposal. The sample on the left is full of leachate from the Jackson County landfill, the stuff that would be injected into the well. The sample on the right shows leachate after it's been treated at a wastewater treatment plant. The one in the middle is tap water.