Google admits harvesting passwords

The ICO will be investigating Google after the search giant admitted to taking emails, URLs and passwords during its Street View operation.

Computer privacy

Google could face a hefty fine from the UK's privacy watchdog after the search giant admitted it had captured passwords, emails and URLs when it collected unencrypted Wi-Fi payload data during its Street View operation.

The Information Commissioner's Office (ICO) said earlier this year it appeared no "meaningful" data had been taken by Google.

Advertisement - Article continues below

However, following investigations by various regulators from across the globe, Google has now admitted it had taken emails, URLs and passwords.

"We want to delete this data as soon as possible, and I would like to apologise again for the fact that we collected it in the first place," said Alan Eustace, senior vice president for engineering and research at Google, in a blog post.

"We are mortified by what happened, but confident that these changes to our processes and structure will significantly improve our internal privacy and security practices for the benefit of all our users."

The ICO said it will now be investigating Google again and will consider a monetary fine, which could reach 500,000 - the maximum penalty open to the ICO.

"Whilst the information we saw at the time did not include meaningful personal details that could be linked to an identifiable person, we have continued to liaise with, and await the findings of, the investigations carried out by our international counterparts," an ICO spokesperson said.

Advertisement
Advertisement - Article continues below
Advertisement - Article continues below

"We will be making enquires to see whether this information relates to the data inadvertently captured in the UK, before deciding on the necessary course of action, including a consideration of the need to use our enforcement powers."

Rik Ferguson, senior security advisor at Trend Micro, said it was difficult to see what laws Google would have broken, given no third parties appeared to have seen the data.

"It seems it was completely accidental and unintentional and Google did the best they could in terms of surrendering the information as soon as they discovered there was something they needed to surrender and working with every individual European information commissioner," Ferguson told IT PRO.

"Yes they made a mistake but they've been pretty good at putting their hands up and doing the right thing, which is commendable."

As for whether Google should receive a fine from the ICO, Ferguson said "there was no breach."

"It's difficult to see what laws they would have broken."

However, privacy groups continue to press for penalties, including criminal sanctions, against Google. Earlier this year Privacy International said it believed Google had acted with criminal intent in collecting the data.

Featured Resources

The case for a marketing content hub

Transform your digital marketing to deliver customer expectations

Download now

Fast, flexible and compliant e-signatures for global businesses

Be at the forefront of digital transformation with electronic signatures

Download now

Why CEOS should care about the move to SAP S/4HANA

And how they can accelerate business value

Download now

IT faces new security challenges in the wake of COVID-19

Beat the crisis by learning how to secure your network

Download now
Advertisement

Recommended

Visit/mobile/google-android/355837/arizona-files-lawsuit-against-google-for-illegally-tracking-android
Google Android

Arizona files lawsuit against Google for illegally tracking Android users’ locations

29 May 2020
Visit/security/encryption/355820/k2view-innovates-in-data-management-with-new-encryption-patent
encryption

K2View innovates in data management with new encryption patent

28 May 2020
Visit/network-internet/email-providers/355822/gmail-introduces-new-features-to-makes-personalizing-your
email providers

Gmail introduces new features to makes personalizing your inbox easier

28 May 2020
Visit/mobile/google-android/355804/google-confirms-users-can-make-purchases-via-voice-match-feature
Google Android

Google Assistant can now verify payments using your voice

27 May 2020

Most Popular

Visit/server-storage/network-attached-storage-nas/355849/western-digital-sneaked-inferior-smr-tech-into
network attached storage (NAS)

Western Digital accused of sneaking inferior SMR tech into NAS drives

1 Jun 2020
Visit/security/data-breaches/355777/easyjet-faces-class-action-lawsuit-over-data-breach
data breaches

EasyJet faces class-action lawsuit over data breach

26 May 2020
Visit/operating-systems/microsoft-windows/355812/microsoft-warns-against-installing-windows-10-may-2020
Microsoft Windows

Microsoft warns users not to install Windows 10's May update

28 May 2020