Google collected sensitive data, including passwords, a French data protection agency examination has found.
The information was collected from unsecured wireless networks by the search engine’s Street View vehicles as the company logged WiFi hotspots, the BBC reported Monday.
CNIL, the French data protection agency, told reporters that an early look indicated the presence of “data that are normally covered by… banking and medical privacy rules,” the BBC reported.
Passwords for e-mail and “chunks of text from messages” were reportedly found, according to the British media.
The search engine giant said it was working with authorities and would delete the information it had gathered, if requested, the BBC reported.
Google acknowledged that its vehicles had “mistakenly” collected and stored data broadcast from wireless networks in Connecticut, Tech Talk reported earlier this month.
The search engine called the collection a software mistake, Tech Talk cited a release by Connecticut’s Attorney General, Richard Blumenthal, as saying. Google has stressed that the data has been secured and was not used “in any Google service or product.”
Google said it has grounded its entire Street View fleet and has stopped collecting wireless data, Tech Talk has previously reported. The search engine “believes” it started collecting the data in Connecticut two years ago, Blumenthal said in a statement.
“Our ultimate objective is to delete the data consistent with our legal obligations and in consultation with the appropriate authorities,” a Google spokesperson said.
Investigations have been launched in Australia, Canada, Germany, Italy, New Zealand and Spain. Several U.S. states are considering filing civil suits, the BBC reported.
The company stated earlier this month in a release sent through Blumenthal’s office that it considered the information broadcast from the personal and business networks to be public information. It said it needs the information to “improve our location-based services.”
This is a serious issue. Any information collected could lead to people becoming victimized – not just by Google but by someone who hacks into the technology giant’s servers, which have been compromised before. This news should remind Web surfers that they should only use secure wireless connections – or else they face becoming a victim. Learn more about wireless security here.
Even before Monday’s news, Connecticut’s attorney general indicated that a probe in the state was underway.
“Google’s actions raise troubling and profound questions about privacy and whether laws need to be clarified or changed,” Blumenthal said in a statement distributed earlier this month. “I urge consumers to consider encrypting their wireless computer networks. An unencrypted network is an invitation to snooping, like broadcasting all communications on loudspeakers. Anyone with the right software and equipment can listen in.”