Feds: Fandango Customers Were Vulnerable to Hackers, Identity Theft

The movie-ticket company and a credit-monitoring service settle FTC charges.

Fandango puppets
National Journal
Brendan Sasso
March 28, 2014, 10:28 a.m.

If you bought movie tick­ets between 2009 and 2013 on Fan­dango’s mo­bile app, your cred­it-card in­form­a­tion may have been an easy tar­get for hack­ers.

Fan­dango settled a law­suit with the Fed­er­al Trade Com­mis­sion on Fri­day over charges that it failed to take ba­sic steps to pro­tect user data on its app for iPhones and iPads.

Cred­it Karma, a cred­it-check­ing ser­vice, settled sim­il­ar charges Fri­day with the FTC for fail­ing to pro­tect mo­bile-app data.

Neither com­pany is re­quired to pay any fin­an­cial pen­alty as part of the set­tle­ments, al­though both Fan­dango and Cred­it Karma are re­quired to es­tab­lish “com­pre­hens­ive se­cur­ity pro­grams” and to un­der­go in­de­pend­ent se­cur­ity as­sess­ments every oth­er year for the next 20 years.

Ac­cord­ing to the law­suits, the com­pan­ies dis­abled a de­fault en­cryp­tion pro­cess, known as SSL cer­ti­fic­a­tion. As a res­ult, hack­ers could have eas­ily in­ter­cep­ted private in­form­a­tion, es­pe­cially on pub­lic Wi-Fi net­works of­ten found in cof­fee shops, shop­ping cen­ters, or air­ports, the FTC said.

Des­pite the vul­ner­ab­il­ity, Fan­dango as­sured cus­tom­ers that their cred­it card in­form­a­tion was safe as they checked out. Cred­it Karma claimed it was us­ing “in­dustry-lead­ing se­cur­ity pre­cau­tions.”

In a state­ment Fri­day, Fan­dango said it up­graded its se­cur­ity in March 2013 and that it is not aware of any cus­tom­ers who had their in­form­a­tion stolen.

“Se­cur­ity is among Fan­dango’s top pri­or­it­ies, and we are fully com­mit­ted to pro­tect­ing our cus­tom­ers’ per­son­al in­form­a­tion,” the com­pany said. “We have re­viewed and heightened our se­cur­ity pro­gram to pro­tect our cus­tom­ers’ per­son­al in­form­a­tion, across all of Fan­dango’s products and plat­forms, and we test reg­u­larly for data se­cur­ity.”

A Cred­it Karma spokes­man said the com­pany has ad­dressed the se­cur­ity is­sue and is not aware of any lost data.

FTC Chair­wo­man Edith Ramirez noted that con­sumers are in­creas­ingly re­ly­ing on mo­bile apps to make pur­chases and handle sens­it­ive fin­an­cial in­form­a­tion.

“Our cases against Fan­dango and Cred­it Karma should re­mind app de­velopers of the need to make data se­cur­ity cent­ral to how they design their apps,” she said.

Sen­ate Com­merce Com­mit­tee Chair­man Jay Rock­e­feller, Sen­ate Ju­di­ciary Com­mit­tee Chair­man Patrick Leahy, and oth­er law­makers are push­ing bills that would al­low the FTC to fine com­pan­ies for in­ad­equate data-se­cur­ity prac­tices.

The FTC is cur­rently in­vest­ig­at­ing Tar­get over last year’s massive hack of cred­it-card in­form­a­tion.

What We're Following See More »
STAFF PICKS
When It Comes to Mining Asteroids, Technology Is Only the First Problem
1 days ago
WHY WE CARE

Foreign Policy takes a look at the future of mining the estimated "100,000 near-Earth objects—including asteroids and comets—in the neighborhood of our planet. Some of these NEOs, as they’re called, are small. Others are substantial and potentially packed full of water and various important minerals, such as nickel, cobalt, and iron. One day, advocates believe, those objects will be tapped by variations on the equipment used in the coal mines of Kentucky or in the diamond mines of Africa. And for immense gain: According to industry experts, the contents of a single asteroid could be worth trillions of dollars." But the technology to get us there is only the first step. Experts say "a multinational body might emerge" to manage rights to NEOs, as well as a body of law, including an international court.

Source:
STAFF PICKS
Obama Reflects on His Economic Record
1 days ago
WHY WE CARE

Not to be outdone by Jeffrey Goldberg's recent piece in The Atlantic about President Obama's foreign policy, the New York Times Magazine checks in with a longread on the president's economic legacy. In it, Obama is cognizant that the economic reality--73 straight months of growth--isn't matched by public perceptions. Some of that, he says, is due to a constant drumbeat from the right that "that denies any progress." But he also accepts some blame himself. “I mean, the truth of the matter is that if we had been able to more effectively communicate all the steps we had taken to the swing voter,” he said, “then we might have maintained a majority in the House or the Senate.”

Source:
STAFF PICKS
Reagan Families, Allies Lash Out at Will Ferrell
1 days ago
WHY WE CARE

Ronald Reagan's children and political allies took to the media and Twitter this week to chide funnyman Will Ferrell for his plans to play a dementia-addled Reagan in his second term in a new comedy entitled Reagan. In an open letter, Reagan's daughter Patti Davis tells Ferrell, who's also a producer on the movie, “Perhaps for your comedy you would like to visit some dementia facilities. I have—I didn’t find anything comedic there, and my hope would be that if you’re a decent human being, you wouldn’t either.” Michael Reagan, the president's son, tweeted, "What an Outrag....Alzheimers is not joke...It kills..You should be ashamed all of you." And former Rep. Joe Walsh called it an example of "Hollywood taking a shot at conservatives again."

Source:
PEAK CONFIDENCE
Clinton No Longer Running Primary Ads
2 days ago
WHY WE CARE

In a sign that she’s ready to put a longer-than-ex­pec­ted primary battle be­hind her, former Sec­ret­ary of State Hil­lary Clin­ton (D) is no longer go­ing on the air in up­com­ing primary states. “Team Clin­ton hasn’t spent a single cent in … Cali­for­nia, In­di­ana, Ken­tucky, Ore­gon and West Vir­gin­ia, while” Sen. Bernie Sanders’ (I-VT) “cam­paign has spent a little more than $1 mil­lion in those same states.” Meanwhile, Sen. Jeff Merkley (D-OR), Sanders’ "lone back­er in the Sen­ate, said the can­did­ate should end his pres­id­en­tial cam­paign if he’s los­ing to Hil­lary Clin­ton after the primary sea­son con­cludes in June, break­ing sharply with the can­did­ate who is vow­ing to take his in­sur­gent bid to the party con­ven­tion in Phil­adelphia.”

Source:
CITIZENS UNITED PT. 2?
Movie Based on ‘Clinton Cash’ to Debut at Cannes
2 days ago
WHY WE CARE

The team behind the bestselling "Clinton Cash"—author Peter Schweizer and Breitbart's Stephen Bannon—is turning the book into a movie that will have its U.S. premiere just before the Democratic National Convention this summer. The film will get its global debut "next month in Cannes, France, during the Cannes Film Festival. (The movie is not a part of the festival, but will be shown at a screening arranged for distributors)." Bloomberg has a trailer up, pointing out that it's "less Ken Burns than Jerry Bruckheimer, featuring blood-drenched money, radical madrassas, and ominous footage of the Clintons."

Source:
×