2 ms·
The headline misled me into thinking that MGM tried to stop the FTC from investigating. In reality, MGM asked Lina Khan (FTC Chair and one of the five Commissio
by hn_acker 3y ago
The headline misled me into thinking that MGM tried to stop the FTC from investigating. In reality, MGM asked Lina Khan (FTC Chair and one of the five Commissioners) to recuse herself from the investigation due to her apparent conflict of interest:
> After being notified about the FTC's investigation into the matter, MGM requested that Khan recuse herself because of her personal involvement in the case. The FTC denied this request.
- wakawaka28 3y agoOn the surface, it looks like the investigation might come from personal interest in the case from Mrs. Khan. Wtf does the FTC have to do with corporate hacking anyway?
- hn_acker 3y agoI think that the FTC's authority has less to do with the corporate hacking part and more to do with whether the hacked company had followed bare minimum data security practices before the ransomware attack [1]. What the bare minimum is, I'm not sure myself. If I had been in Lina Khan's place as a customer at MGM's hotel on that day, I would've had some expectation that MGM would, after having suffered a ransomware attack, be extra careful with the credit card information that MGM tells me to write on paper. I would want MGM to be clear about "Who will have access to this info or paper?", "where and how will you store this info?", "how when will you destroy this info?" [1] https://www.ftc.gov/business-guidance/privacy-security https://www.ftc.gov/business-guidance/privacy-security