Stay up to date with notifications from The Independent

Notifications can be managed in browser preferences.

Twitter settles with US regulators over privacy breach

Afp
Thursday 24 June 2010 19:00 EDT
Comments

Your support helps us to tell the story

From reproductive rights to climate change to Big Tech, The Independent is on the ground when the story is developing. Whether it's investigating the financials of Elon Musk's pro-Trump PAC or producing our latest documentary, 'The A Word', which shines a light on the American women fighting for reproductive rights, we know how important it is to parse out the facts from the messaging.

At such a critical moment in US history, we need reporters on the ground. Your donation allows us to keep sending journalists to speak to both sides of the story.

The Independent is trusted by Americans across the entire political spectrum. And unlike many other quality news outlets, we choose not to lock Americans out of our reporting and analysis with paywalls. We believe quality journalism should be available to everyone, paid for by those who can afford it.

Your support makes all the difference.

Twitter has reached a settlement with US regulators over a privacy breach that allowed hackers to access the accounts of then president-elect Barack Obama and others and send out phony messages.

Under the settlement with the Federal Trade Commission (FTC), the popular San Francisco-based micro-blogging service must establish an independently audited "comprehensive information security program," the FTC said.

Twitter is also barred for 20 years from "misleading consumers about the extent to which it maintains and protects the security, privacy, and confidentiality" of its users.

"When a company promises consumers that their personal information is secure, it must live up to that promise," said David Vladeck, director of the FTC's bureau of consumer protection.

"Serious lapses in the company's data security allowed hackers to obtain administrative control of Twitter... and the ability to send out phony tweets pretending to be from then-president-elect Barack Obama and Fox News, among others," the FTC said.

It said a hacker used a password-guessing tool to gain administrative control of Twitter in January 2009 and reset numerous user passwords, posting some of them on a website where other people could access them.

"Using these fraudulently reset passwords, other intruders sent phony tweets from approximately nine user accounts," the FTC said.

"One tweet was sent from the account of then-president-elect Barack Obama, offering his more than 150,000 followers a chance to win 500 dollars in free gasoline," it said.

In an April 2009 breach, a hacker compromised a Twitter employee's personal e-mail account, gaining access to private user information and messages for any Twitter users.

"Twitter was vulnerable to these attacks because it failed to take reasonable steps to prevent unauthorized administrative control of its system," the FTC said.

The FTC said the case was its 30th targeting faulty data security and its first against a social networking service.

The micro-blogging service has exploded in popularity since it was launched in March 2006 and Twitter chief operating officer Dick Costello said recently that it now attracts 190 million visitors a month.

Join our commenting forum

Join thought-provoking conversations, follow other Independent readers and see their replies

Comments

Thank you for registering

Please refresh the page or navigate to another page on the site to be automatically logged inPlease refresh your browser to be logged in