4 ms·
On the surface, it looks like the investigation might come from personal interest in the case from Mrs. Khan. Wtf does the FTC have to do with corporate hacking
by wakawaka28 3y ago
On the surface, it looks like the investigation might come from personal interest in the case from Mrs. Khan. Wtf does the FTC have to do with corporate hacking anyway?
- hn_acker 3y agoI think that the FTC's authority has less to do with the corporate hacking part and more to do with whether the hacked company had followed bare minimum data security practices before the ransomware attack [1]. What the bare minimum is, I'm not sure myself. If I had been in Lina Khan's place as a customer at MGM's hotel on that day, I would've had some expectation that MGM would, after having suffered a ransomware attack, be extra careful with the credit card information that MGM tells me to write on paper. I would want MGM to be clear about "Who will have access to this info or paper?", "where and how will you store this info?", "how when will you destroy this info?" [1] https://www.ftc.gov/business-guidance/privacy-security https://www.ftc.gov/business-guidance/privacy-security