Internet Firm Sued For Privacy Breach

(AP)  New York's attorney general sued an Internet company Thursday over the selling of e-mail addresses in what authorities say may be the biggest deliberate breach of Internet privacy ever.

Attorney General Eliot Spitzer accused Gratis Internet of selling personal information obtained from millions of consumers despite a promise of confidentiality.

The consumers thought they were simply registering to see a Web site offering free iPod music players or DVD movies and video games, Spitzer spokesman Brad Maione said. On sign-up pages, Gratis promised it "does not ... sell/rent e-mails."

Instead of confidentiality, Spitzer said, Gratis sold access to their e-mail information to three independent e-mail marketers, and hundreds of millions of e-mail solicitations followed.

In a statement, Gratis spokesman George Thompson said the allegations the company sold e-mail addresses to e-mail marketers, and that these companies purchased personal user information from Gratis, were "completely untrue."

Thompson said Gratis hired Datran Media of New York City, a leading e-mail marketer, to manage "the logistics of marketing products and services via e-mail to Gratis' own user base." He said Datran or two other hired companies "at no time ever engaged in a sale or purchase of data."

Gratis, based in Washington, D.C., always controlled and owned the users' information and never profited from any sale of data, he said.

On March 12, Spitzer sued Datran Media, accusing it of using unauthorized personal data "mined" by other firms from about 6 million e-mail addresses nationwide. Datran agreed to reform its practices under a $1.1 million settlement.

"Unless checked now, companies that collect and sell information on consumers will continue to find ways to erode the basic standards that protect privacy in the Internet age," Spitzer said.

Spitzer's "data mining" investigation began last year amid reports of companies compiling and selling marketing lists.

Gratis owns and operates Web sites that offer free merchandise for registering their e-mail addresses. The state fraud lawsuit accuses its owners, Peter Martin and Robert Jewell, of privacy violations in 2004 and 2005.

Spitzer claims Gratis wrongly shared as many as 7 million "user records," creating the largest deliberate breach of a privacy policy discovered by U.S. law enforcement. He said the company's promises to consumers included: "We will never give out, sell or lend your name or information to anyone," and "We will never lend, sell or give out for any reason your e-mail address or personal information."