Guess Inc. Agrees to Tighten Web Security
By DAVID HO
WASHINGTON (AP) — Clothing marketer Guess Inc. (GES) will tighten security for its Web site to resolve federal charges that it failed to protect customer credit card information from computer hackers.
The Federal Trade Commission said Wednesday that Guess misled visitors to its Web site with promises that personal information would always be protected in a secure form that couldn’t be read by hackers. The FTC said the information was vulnerable to common hacker attacks and last year one Internet intruder accessed customer credit card numbers.
“Companies have an obligation, particularly when they promise security, to take steps to make sure that obvious vulnerabilities aren’t there,” said Howard Beales, director of the FTC’s Bureau of Consumer Protection. “They need to lock the doors.”
The Guess Web site has been vulnerable to attack since at least October 2000, the FTC said.
“There are relatively easy fixes that Guess could have done,” Beales said. “They just didn’t until after it was brought to their attention by the FTC.”
Guess said in a statement that no consumers were harmed by the hacker attack last year.
“Since that time, we have upgraded our site to best ensure the security of our consumers’ personal information,” the company said. “We will continue to monitor and upgrade our site in order to safeguard the privacy of our consumers.”
By settling, Guess doesn’t acknowledge breaking any law.
Under the settlement, Guess must create a new security program that is certified annually by an independent expert. The company also is banned from making false claims about its security.
The settlement is the third FTC case involving misleading Internet privacy or security claims. Past cases involved Microsoft Corp. (MSFT)’s Passport Internet service and drug maker Eli Lilly and Co., which mistakenly released the e-mail addresses of more than 600 people taking Prozac.
—–
On the Net:
More science, space, and technology from RedNova
Copyright © 2003 The Associated Press. All rights reserved. The information contained in the AP News report may not be published, broadcast, rewritten or redistributed without the prior written authority of The Associated Press.
