FTC Cites Debt Collection Firms Over Poor Data Security

The Federal Trade Commission has ordered two debt sellers—St. Petersburg Florida's Bayview Solutions, LLC and Riverside, California's Cornerstone and Company, LLC — to notify customers about alleged disclosures of their personal information.

The agency accused the businesses of posting personal information, including bank account and credit card numbers, online in insecure ways, like on Excel spreadsheets. The FTC said the portfolios of the sensitive information were accessed over 500 times, and that anyone visiting the site, "could access and download the spreadsheets, and use the information to exploit consumers."

A preliminary injunction was filed against Cornerstone on September 10, while Bayview agreed to an injunction on November 3. The injunction requires the companies to strengthen their security measures while also notifying consumers that their information could have been mishandled and abused.

 

For reprint and licensing requests for this article, click here.
Consumer banking Law and regulation
MORE FROM AMERICAN BANKER