Skip to comments.
Victoria's Secret Reveals Too Much
cbs ^
| 10-22-03
Posted on 10/22/2003 5:55:37 PM PDT by wheelgunguru
(AP) Victoria's Secret has agreed to pay a $50,000 fine to the state of New York while promising to improve computer security practices after a glitch on its Web site allowed viewers to browse other customers' online orders.
The lingerie stores' Columbus-based parent company, Limited Brands, said it fixed the problem within days of being notified by a customer last November. New York Attorney General Eliot Spitzer announced the fine and settlement with Limited on Tuesday.
A glitch in a feature allowing customers to check their order status allowed them to randomly call up other orders, seeing details such as sizes, prices, customer names and addresses. The faulty site didn't reveal credit card numbers or allow visitors to search orders by name.
The company is notifying about 560 customers who were affected nationwide by mail, spokesman Anthony Hebron said. New York was the only state to take legal action, he said Wednesday.
The settlement requires Victoria's Secret to provide refunds or credits to affected customers in New York. The company has not yet determined the number of customers in the state or the amount of potential refunds, Hebron said.
It also requires the company to establish an information security program and hire an external auditor to review it yearly.
TOPICS: Culture/Society
KEYWORDS: privacy; victoriassecret
Navigation: use the links below to view more comments.
first 1-20, 21 next last
allowed viewers to browse other customers' online orders Oops! And, in other news, Bob's wife discovered Bob ordered her a size 4 teddy. Only, Bob's wife isn't a four. She's a fourteen!
To: wheelgunguru
I was really expecting a lot more from this thread. ;)
2
posted on
10/22/2003 5:59:41 PM PDT
by
meyer
To: wheelgunguru
What is Marv Albert buying these days?
To: wheelgunguru
What!? Strangers know I ordered underpants and brasssieres?
The horror!
4
posted on
10/22/2003 6:03:59 PM PDT
by
annyokie
(One good thing about being wrong is the joy it brings to others.)
To: annyokie
Strangers know I ordered underpants and brasssieres?The horror!
No - strangers know I did!!!
To: Senator Pardek
No - strangers know I did!!! Does that mean I'm no longer a stranger. Or maybe I'm just stranger...
6
posted on
10/22/2003 6:07:43 PM PDT
by
meyer
To: meyer
Shouldn't there be some pictures? Cavuto would run the tape!
7
posted on
10/22/2003 6:08:58 PM PDT
by
Wingy
To: meyer
What size? ; )
8
posted on
10/22/2003 6:09:24 PM PDT
by
annyokie
(One good thing about being wrong is the joy it brings to others.)
To: wheelgunguru
VS is not the concern .. now if Frederick's lets info get loose .. whoa daddy!
9
posted on
10/22/2003 6:09:32 PM PDT
by
BlueNgold
(Feed the Tree .....)
To: meyer
I was really expecting a lot more from this thread. ;)I was expecting a lot LESS...
To: meyer
Great minds think alike.
11
posted on
10/22/2003 6:10:48 PM PDT
by
Dan from Michigan
("I don't want to Raise Taxes" "I think everything must be looked at" - Jennifer Granholm. (D))
To: Dan from Michigan
Sheesh! what a waste of a good thread title!
To: wheelgunguru
Can we at least get some pictures?
13
posted on
10/22/2003 6:14:45 PM PDT
by
Sofa King
(-I am Sofa King- tired of liberal BS! http://www.angelfire.com/art2/sofaking/)
To: Wingy; yall
14
posted on
10/22/2003 6:16:22 PM PDT
by
lodwick
To: wheelgunguru
Security hole was due to poorly configured/easily-guessed session ID token. By manipulating the cookie assigned by the server, you could assume another customer's identity.
15
posted on
10/22/2003 6:18:28 PM PDT
by
yevgenie
(byte me.)
To: Senator Pardek
Oh Lord! I hope it doesn't get out that I ordered those camo-crotchless hunting overalls.
16
posted on
10/22/2003 6:19:57 PM PDT
by
snopercod
(I used to be disgusted. Now I'm just amused.)
To: lodwick
Dang!
Bra's wayyyyyy too prudish!.
;-P
To: wheelgunguru
Victoria's Secret Reveals Too MuchOK, so I was chump went for the headline bait.
In sympathy for others fall for it, I'm posting this pic:
18
posted on
10/22/2003 6:21:34 PM PDT
by
putupon
(The text in this tagline serves no purpose other than to occupy the space between the parentheses)
To: wheelgunguru
Wonder if Bad Boy Bill's name came up on the order forms
To: wheelgunguru
Limited Brands... said it fixed the problem within days of being notified by a customerWithin days! They had to ship a postcard to India or something?
20
posted on
10/22/2003 7:57:32 PM PDT
by
LimitedPowers
(Citizenship is not a Hate Crime!)
Navigation: use the links below to view more comments.
first 1-20, 21 next last
Disclaimer:
Opinions posted on Free Republic are those of the individual
posters and do not necessarily represent the opinion of Free Republic or its
management. All materials posted herein are protected by copyright law and the
exemption for fair use of copyrighted works.
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson
