The Information Commissioner’s Office will investigate claims that Tesco’s website doesn’t protect consumer privacy, ComputerWeekly reports. A number of security experts have raised concerns about how the retailer’s main website stores shoppers’ passwords. One expert said Tesco sent him an e-mail containing his password in plain text, indicating the company is not encrypting such data. The expert also said the company is not using Hypertext Transfer Protocol Secure (HTTPS) on its site to protect users from phishing attacks and data theft. Tesco has said its security is robust and there is no reason to believe customer data is at risk.
Full Story