ICO to investigate Tesco following data security claims
The Information Commissioner's Office (ICO) is to investigate Tesco after research revealed failings in the retail giant's security.
According to Computing, Tesco will be asked to explain the alleged poor security practices of its website, including allegations that it stores login and password information in an unhashed and unsalted format, does not use HTTPS on some pages and emails passwords to users in plain text.
The ICO said that it was "aware of this issue and will be making inquiries". The research released by Troy Hunt last month caused Tesco to respond to claims that it was "well short of industry standards on a number of fronts". A Tesco spokesperson told SC Magazine that it knew how important internet security was to its customers and the measures it had were robust.
