How Some Companies Get a Sneak Peek at Your Life … Literally

Every now and then, many of us get the strange feeling someone’s watching us. Given how easy it is these days for companies to gather information about where we are, what we’re doing, and how we’re doing it, this may well be more than a feeling.

Even so, here’s one that really takes the cake:

The FTC today took action against Aaron’s for allegedly enabling some of its franchisees to use software that allowed them to spy on and collect personal information from customers. Without consumers’ knowledge or consent (but with Aaron’s knowledge) Aaron’s franchisees gathered personal data – including usernames and passwords for email accounts, social media websites, and financial institutions – as well as private details of their customers’ lives. The software captured screenshots of medical information, Social Security numbers, and financial statements. Through the computers’ webcams, the software secretly took pictures of anyone within view of the lens. In some instances, it captured pictures of children, individuals not fully clothed, and other highly personal images. What’s more, the software generated fake registration forms that tricked people into providing personal information. Anyone renting these computers was unable to detect, let alone uninstall, the software.

Rent-to-own stores had been using this kind of software to shut down computers when customers got behind on their payments. But to activate the spying features of the software, Aaron’s franchisees had to access the software manufacturer’s website – which many franchisees could do only with the help of Aaron’s computer network and technology staff. 

This case outlines one of the many ways companies can gather even the most intimate details about you – not just from computers, but from mobile devices, the use of savings cards, and other things you use and do day-to-day. Learn what to do to secure your computer, protect your personal information and fight identity theft. And, please, file a complaint with the FTC if you suspect a company or individual has violated your privacy or other consumer rights.


Leave a Comment

Comment Policy

This is a moderated blog; we review all comments before they are posted.  We expect participants to treat each other and the bloggers with respect.  We will not post comments that do not comply with our comment policy.  If a submitted comment includes a link to a commercial website, we will delete the link and post the comment. We won't edit comments except to remove links.

We won’t post:

  • spam or off-topic comments
  • comments that contain vulgar language, personal attacks, or offensive terms that target specific groups
  • sales pitches or promotions
  • comments that contain clearly misleading or false information
  • comments that contain personal information, like home addresses

Comments submitted to this blog become part of the public domain. To protect your privacy and the privacy of others, please do not include personal information. Also, do not use this blog to report fraud; instead, file a complaint.

If you have questions about the commenting policy, please contact us.

Read Our Privacy Act Statement

It is your choice whether to submit a comment. If you do, you must create a
user name, or we will not post your comment. The Federal Trade Commission Act
authorizes this information collection for purposes of managing online
comments. Comments and user names are part of the Federal Trade Commission’s
(FTC) public records system, and user names also are part of the FTC’s computer
user records system. We may routinely use these records as described in the
FTC’s Privacy Act system notices. For more information on how the FTC handles
information that we collect, please read our privacy policy.