Barnesandnoble.com to pay fine, boost security | CNET News.com

Barnesandnoble.com has agreed to pay $60,000 and boost Internet security after a flaw that exposed the personal information of some shoppers, New York State Attorney General Eliot Spitzer said Thursday. The agreement stems from an investigation that found that a design flaw in the New York-based company’s Web site granted access to customer information such as name, billing address and account information but not credit card numbers.

So, to my B&N; membership pitch when I say, “…and we don’t sell your name or information to anyone,” I should add, “but we’ll let it slip out the back door without noticing.”