Article Details
Scrape Timestamp (UTC): 2024-04-25 21:05:25.088
Source: https://www.theregister.com/2024/04/25/ring_ftc_settlement/
Original Article Text
Click to Toggle View
Ring dinged for $5.6M after, among other claims, rogue insider spied on 'pretty girls'. Cash to go out as refunds to punters. The FTC today announced it would be sending refunds totaling $5.6 million to Ring customers, paid from the Amazon subsidiary's coffers. The windfall stems from allegations made by the US watchdog that folks could have been, and were, spied upon by cybercriminals and rogue Ring workers via their Ring home security cameras. The regulator last year accused Ring of sloppy privacy protections that allowed the aforementioned spying to occur or potentially occur. Specifically, the FTC formally charged Ring with "compromising its customers' privacy by allowing any employee or contractor to access consumers' private videos and by failing to implement basic privacy and security protections, enabling hackers to take control of consumers' accounts, cameras, and videos." Miscreants were able to, for instance, brute-force or credential-stuff their way into victims' Ring accounts, including those of 55,000 American customers, due to a lack of security defenses in place, it's said. These accounts held Ring camera footage to playback, and intruders could even talk through the cameras to freak out their victims. In many instances, these scumbags took the opportunity to harass Ring users with expletives and racial slurs, and in one case one user was even greeted with a death threat, it was claimed. At the same time, some Ring employees and contractors were viewing and amassing private footage because there was simply nothing stopping them, the FTC said. Customer service reps had access to cameras of users who didn't ask for tech support, and even those who did explicitly ask for help couldn't stop workers from accessing cameras that were unrelated to whatever issue was at hand, it was claimed. In the most egregious case, one employee went out of his way to view "thousands of video recordings belonging to at least 81 unique female users," according to the FTC. A coworker reported this behavior to her supervisor, who it's alleged initially said this snooping wasn't that strange until he realized the rogue employee was only reviewing videos of "pretty girls." Ring was forced to hand over $5.6 million to the FTC, which is now distributing it among affected Ring customers. These payments will be sent via PayPal (yes, really) to 117,044 accounts. Assuming these refunds are divided evenly and that each account stands for one buyer, Ring customers will be getting back just under $50. That's not even enough to buy a single Ring camera, which start at over $100. Also, the payout is a rounding figure on the annual balance sheet of Amazon, which bought Ring for more than a billion dollars in 2018. We've asked Ring for further comment.
Daily Brief Summary
The FTC has issued $5.6 million in refunds to Ring customers as restitution for privacy violations.
Allegations included unauthorized access by rogue Ring employees and cybercriminal attacks on customer accounts.
The FTC accused Ring of inadequate security measures, allowing easy access to customer video feeds and account control by unauthorized users.
Ring's insufficient privacy controls granted employees and contractors unrestricted access to user's private videos, including sensitive footage.
Interactions from compromised accounts included harassment and threats directed at customers through their security cameras.
One serious incident involved a rogue employee who specifically accessed videos of female users he found attractive.
The refund affects 117,044 Ring accounts, with each affected customer receiving less than $50 via PayPal.
The fine represents a minor expense on the balance sheet for Amazon, which owns Ring.