AOL Exposes Search Data On 658,000 People

Welcome Guest. | Log In| Register | Membership Benefits

August 07, 2006 (2:29 PM EDT)

Page 1 of 2

By Antone Gonsalves , TechWeb Technology News

AOL on Monday admitted exposing the personal search data of 658,000 people, and issued an apology for what it called a "screw up."

AOL, a unit of Time Warner Inc., made the information available for download through its research site. The people were randomly chosen among users of AOL's search engine from March through May. Each record was stripped of the person's screen name, which was replaced with a number.

While its unclear how long the information was available, it was on the site at least since Saturday and taken down on Sunday.

"This was a screw up, and we're angry and upset about it," AOL spokesman Andrew Weinstein said in an emailed statement. "It was an innocent enough attempt to reach out to the academic community with new research tools, but it was obviously not appropriately vetted, and if it had been, it would have been stopped in an instant."

The incident brought a swift and angry response from the blogosphere, which questioned why AOL would post the same kind of data that Google Inc. earlier this year had fought in court to withhold from the U.S. Department of Justice.

"The utter stupidity of this is staggering," Michael Arrington wrote on his blog TechCrunch.

Bloggers reported that the 2-gigabyte file provided by AOL included among the search queries personal information such as people's names, addresses, social security numbers and telephone numbers. Weinstein said that while there was no personally identifiable data provide by AOL with the records, "search queries themselves can sometimes include such information."

"It was a mistake, and we apologize," the spokesman said. "We've launched an internal investigation into what happened, and we are taking steps to ensure that this type of thing never happens again."

Even if the names of search engine users are withheld, privacy advocates argue, what people scour the Web for can sometimes provide enough information for employers or friends and family to identify them. The search data could also be used by law enforcement to begin investigations based on what looks like illegal activity, even though there's no evidence that a crime has been committed.

Page 1 of 2