June 27, 2005

Drugstore Chain Disables Web Site Feature Allowing Tracking of Customer Purchases

In a statement June 22 retail drugstore chain CVS Corp. acknowledged that it had disabled a feature on its Web site that allows registered users of its loyalty cards to track purchases made under “flexible spending accounts” (FSA) set up through their employers. The feature allowed an unauthorized person to improperly obtain customer purchase records via e-mail. More than 50 million customers use its ExtraCare loyalty cards, CVS said.

CVS ends Web site feature over privacy concerns, ComputerWorld, June 23, 2005.