Sears Violation of Its Privacy Policy

by certifiedbug on January 5, 2008

in Internet Security

Bits from Bill: Your Sears Purchase Details Available to World

Ben Edelman update January 4, 2008.

Sears Exposes Customer Purchase History in Violation of Its Privacy Policy.

Sears’s Response

I wrote to Sears ManageMyHome via the addresses on their Contact Us page. To their credit, they responded quickly (less than ninety minutes). However, their reply does not address the seriousness of this situation. Their reply follows:

“We appreciate that you have a security concern. Thank you for taking the time to share your comments with us. We appreciate hearing feedback from our customers, and will pass this information to the appropriate area to research.”

Update (January 4, 5pm): Sears has disabled the search feature described above. Attempts to retrieve a purchase history now yield the message “We’re sorry, this feature is currently disabled.”

Let’s hope it stays that way else all Sears customers join in filing a class action suit.

Leave a Comment

Previous post:

Next post: