Google admits harvesting passwords

The ICO will be investigating Google after the search giant admitted to taking emails, URLs and passwords during its Street View operation.

Computer privacy

Google could face a hefty fine from the UK's privacy watchdog after the search giant admitted it had captured passwords, emails and URLs when it collected unencrypted Wi-Fi payload data during its Street View operation.

The Information Commissioner's Office (ICO) said earlier this year it appeared no "meaningful" data had been taken by Google.

Advertisement - Article continues below

However, following investigations by various regulators from across the globe, Google has now admitted it had taken emails, URLs and passwords.

"We want to delete this data as soon as possible, and I would like to apologise again for the fact that we collected it in the first place," said Alan Eustace, senior vice president for engineering and research at Google, in a blog post.

"We are mortified by what happened, but confident that these changes to our processes and structure will significantly improve our internal privacy and security practices for the benefit of all our users."

The ICO said it will now be investigating Google again and will consider a monetary fine, which could reach 500,000 - the maximum penalty open to the ICO.

"Whilst the information we saw at the time did not include meaningful personal details that could be linked to an identifiable person, we have continued to liaise with, and await the findings of, the investigations carried out by our international counterparts," an ICO spokesperson said.

Advertisement
Advertisement - Article continues below
Advertisement - Article continues below

"We will be making enquires to see whether this information relates to the data inadvertently captured in the UK, before deciding on the necessary course of action, including a consideration of the need to use our enforcement powers."

Rik Ferguson, senior security advisor at Trend Micro, said it was difficult to see what laws Google would have broken, given no third parties appeared to have seen the data.

"It seems it was completely accidental and unintentional and Google did the best they could in terms of surrendering the information as soon as they discovered there was something they needed to surrender and working with every individual European information commissioner," Ferguson told IT PRO.

"Yes they made a mistake but they've been pretty good at putting their hands up and doing the right thing, which is commendable."

As for whether Google should receive a fine from the ICO, Ferguson said "there was no breach."

"It's difficult to see what laws they would have broken."

However, privacy groups continue to press for penalties, including criminal sanctions, against Google. Earlier this year Privacy International said it believed Google had acted with criminal intent in collecting the data.

Featured Resources

Staying ahead of the game in the world of data

Create successful marketing campaigns by understanding your customers better

Download now

Remote working 2020: Advantages and challenges

Discover how to overcome remote working challenges

Download now

Keep your data available with snapshot technology

Synology’s solution to your data protection problem

Download now

After the lockdown - reinventing the way your business works

Your guide to ensuring business continuity, no matter the crisis

Download now
Advertisement

Recommended

The House of Lords will never bring tech giants to book
IT regulation

The House of Lords will never bring tech giants to book

8 Aug 2020
Google Cloud and Orange team up on AI and cloud computing
cloud computing

Google Cloud and Orange team up on AI and cloud computing

28 Jul 2020
Google to build subsea data cable linking the UK, US and Spain
Network & Internet

Google to build subsea data cable linking the UK, US and Spain

28 Jul 2020
Big tech antitrust investigation report expected by early fall
Policy & legislation

Big tech antitrust investigation report expected by early fall

24 Jul 2020

Most Popular

How to find RAM speed, size and type
Laptops

How to find RAM speed, size and type

3 Aug 2020
How to use Chromecast without Wi-Fi
Mobile

How to use Chromecast without Wi-Fi

4 Aug 2020
UN report points to a 350% rise in phishing websites at start of 2020
phishing

UN report points to a 350% rise in phishing websites at start of 2020

7 Aug 2020