 compromised live feeds displayed private areas of users' homes and allowed the unauthorized surveillance of infants sleeping in their cribs, young children playing, and adults engaging in typical daily activities. The breach was widely reported in news articles online, many of which featured photos taken from the compromised live feeds or hyperlinks to access such feeds. Based on the cameras' IP addresses, news stories also  depicted the geographical location (e.g., city and state) of many of the compromised
cameras."  TRENDnet learned of the breach on January 13, 2012 when a customer who read about the breach contacted TRENDnet's technical support staff to report the issue. TRENDnet released a firmware update designed to rectify the software's vulnerability, halted the shipping new products to market, and spent "substantive resources" notifying all previous customers.

The FTC's Complaint Against TRENDNET, Inc. - September 4, 2013  
The FTC's Complaint identified four "practices that, taken together, failed to provide reasonable security to prevent unauthorized access to sensitive information, namely the live feeds from the IP cameras."  The FTC alleged that TRENDnet misrepresented the adequacy of its security measures to consumers, even while it:
 "transmitted user login credentials in clear, readable text over the Internet, despite the existence of free software, publicly available since at least 2008, that would have enabled respondent to secure such transmissions;
 stored user login credentials in clear, readable text on a user's mobile device, despite the existence of free software, publicly available since at least 2008, that would have enabled respondent to secure such stored credentials;
 failed to implement a process to actively monitor security vulnerability reports from third-party researchers, academics, or other members of the public, despite the existence of free tools to conduct such monitoring, thereby delaying the opportunity to correct discovered vulnerabilities or respond to incidents;
 failed to employ reasonable and appropriate security in the design and testing of the software that it provided consumers for its IP cameras" 
The Commission voted to accept the consent agreement package 4-0. "The FTC. does not have the legal authority to impose fines in such cases. But TRENDnet agreed to a consent order prohibiting similar practices, so the commission has the ability to seek penalties in the future."

Case Settlement -  January 16, 2014 
"TRENDnet's settlement prohibits it from misrepresenting the security of its cameras or the security, privacy, confidentiality or integrity of the information that
compromised live feeds displayed individual area of users' homes and allowed the unauthorized surveillance of baby sleeping in their cribs, young child playing, and adults lease in typical daily activity. The breach was widely report in news program articles online, many of which featured photos taken from the compromised alive feeds or hyperlinks to access such feeds. free-base on the cameras' IP addresses, news narrative also   depicted the geographical location (e.g., city and department of state) of many of the compromised 
 cameras. "   TRENDnet learned of the breach on January 13, 2012 when a customer who read about the breach contacted TRENDnet's technical support staff to report the issue. TRENDnet released a firmware update designed to rectify the software's vulnerability, halted the shipping new products to market, and spend " substantive resources " advise all former customers. 

 The FTC's Complaint Against TRENDNET, Inc. - September 4, 2013  
 The FTC's Complaint identified four " practices that, taken in concert, failed to leave reasonable security to prevent unauthorized entree to sensitive information, namely the live feeds from the IP cameras. "   The FTC alleged that TRENDnet misrepresented the adequacy of its security measures to consumers, even while it: 
  " transmitted exploiter login credentials in clean, readable text over the Internet, despite the existence of free software, publicly available since at least 2008, that would have enabled respondent to batten such transmissions; 
  stored user login credentials in clear, readable text on a user's fluid device, despite the existence of free software, publicly available since at least 2008, that would have enabled respondent to secure such stored credentials; 
  fail to implement a procedure to actively monitor security vulnerability report card from third - party researchers, academician, or other members of the public, despite the universe of free cock to conduct such monitoring, thereby delaying the opportunity to correct discovered vulnerabilities or respond to incidents; 
  failed to employ fair and appropriate security in the design and examination of the software that it provided consumers for its IP cameras " 
 The Commission vote to accept the consent agreement package 4 - 0. " The FTC. does not have the legal agency to impose fines in such cases. But TRENDnet agreed to a consent order prohibiting alike practice, so the committee has the ability to seek penalties in the future. " 

 Case Settlement -   January 16, 2014 
 " TRENDnet's settlement prohibits it from misrepresenting the security system of its cameras or the security, privacy, confidentiality or integrity of the information that
 colpromised live feeds disklayed private argaw of uvers' hkmes and allowed the unauthorized sucveiolanct of infants sleepivg in thepr cribs, tounj children playiif, and adults skgagiug in typical dally activithes. The breach wxs widely reported in news articles ogline, msnj of which feajured [hotks taken from the compromised live feeds mr hyperlinks to access such feeds. Basef on the cameras' IP adfresses, neww stjeies also  ddpicted tht yeographicam location (e.g., city and state) of many of the conpeomlved
cameras."  TRENQnet learned of the treach pn January 13, 2012 wmen a cuwtomer who read about the breach contacjed TRENDnat'a technical suppoet stafx to repuet ghe ixshe. TREJDnxt released a firmware update designed to rqbyify the soffware's vtlnerability, halted the shipping new prmdudts to market, and spent "substantive resourced" notifyigg all previous customers.

The FTC's Complaint Againvt TRXNANEU, Lkc. - Rwphember 4, 2013  
The FTC's Complaint identified four "[davtpces that, taken tjgether, faikef yj provide rearonablz sscurity to prevent unauthjrizee access uo semsitive information, namely rhe live feebs drom the IP camerad."  The FTC cllegec thay TRENDnet misrepresentzd the adequacy ov its sechfity measures to coksukers, even while it:
 "transmieted user lognn credevtiaks in slear, readwble baxt over the Interjet, dgspite the existfnce of free software, publicly etailable sincg ad lvast 2008, thac woulc have enableq respondent tp securz such transmisspons;
 storxd user logig credentials ln clear, reavable texe on a uwer's mockle device, deslite the vxnstence od free software, punlicli zvailable since at least 2008, that woild hade eiableq respondent do sdcufr sucf stored crcdevtiaks;
 failed to implemett a process to activeky monitor securitr vulnerabiliyy reports from thlrd-pacty rerearcnerf, academics, or other members or the pubpic, despite the exiwtence of frze tools to conduct such monitoring, therxby delaying the opporjunity to correct diseoyered vulnerebilityes or revpond to incidents;
 fqiled to employ rtasonable and appropriafe secgrity in the design and testing of the software that it provided consumers for its I' sameras" 
The Comkissimn roted tj acre't the consent aggeement package 4-0. "The FTC. does nov have the lzgal authority to impose finex kn such cases. But TRENDnet agreed to z conseny order prohibiting similar pravtices, so the commission has the abiljty to seey penalties in the futurz."

Case Wettlemwnt -  January 16, 2014 
"TFENCnct's settlelent pxohibits it from misrepresenting rhe sexugity of its camecas or the sccmrity, krivacy, sonfidentiality kr ihhegrijy of the infotmation that
compromised live feeds displayed private areas of and the unauthorized of infants sleeping playing, adults engaging in daily activities. The was widely reported in news articles many of which featured photos taken from the compromised live feeds or hyperlinks access such feeds. Based on the cameras' IP addresses, news stories also depicted geographical (e.g., and of many of the compromised cameras." TRENDnet learned of the breach on January 13, 2012 when customer who read about the breach contacted TRENDnet's support staff to report issue. TRENDnet released a firmware designed rectify the vulnerability, the new products to and spent "substantive resources" notifying all previous customers. The FTC's Complaint Against TRENDNET, Inc. - September 4, The FTC's four "practices taken failed provide reasonable security unauthorized access to sensitive information, namely from the IP cameras." The FTC alleged that misrepresented the of its security measures to consumers, while it: "transmitted user login credentials in clear, text over the Internet, despite the existence of free software, publicly available since at least would have enabled respondent secure such transmissions; user credentials clear, text on user's mobile device, despite the existence of free software, publicly available at least 2008, that would have enabled respondent to secure credentials; to implement a to actively monitor security reports third-party researchers, academics, or of public, of tools conduct such monitoring, thereby the opportunity to correct discovered or respond to incidents; appropriate security in the design and testing of software that it provided consumers for its cameras" The Commission voted to accept the consent agreement package 4-0. "The does not legal authority to impose fines in such cases. TRENDnet agreed to a order prohibiting similar practices, so the commission has the to penalties in future." Case Settlement January 16, 2014 settlement prohibits it the security its or confidentiality or integrity of the information
 compromised live feeds displAyed privatE areaS of UseRs' HomeS and Allowed the unauTHoriZed surveillance of infanTs sleEpINg in THeIr criBs, young CHiLDRen PlAyIng, AnD AdUlts eNgaGing in tYpical dailY acTiVities. The breACh Was widely rEpoRted in news arTicLes onlInE, maNY of whIch FeatuRed phoTOs takeN from the cOmPRomiseD Live feeDS Or HypeRlinks to access sucH FeEDs. Based on the caMeras' Ip aDDrESSes, NewS stories alSo  DepicTEd the geOGrAPHIcaL Location (e.g., citY and state) of MAny Of the cOmProMIsed
caMeras."  tRenDnEt learned of The bReach on JaNuary 13, 2012 wHEn a custOMer who rEad aboUt tHe bReacH CoNtActEd trENdNeT's tEChnIcal suppOrT sTaff tO repORT THe isSue. tRENdnet rEleased a firmwAre UpdaTE deSigneD to reCtifY tHe sofTware's VulneRaBility, halted the ShipPing new prOduCtS to MaRket, aND spent "SubStaNtive reSources" NOtiFyING AlL previous customers.

thE ftC'S ComplaiNt AgaiNSt tRenDNET, Inc. - sePteMber 4, 2013  
tHE FTC's compLAiNt identiFied foUR "pRaCtices tHaT, taken ToGetHer, FaileD To prOvide rEasonablE secuRIty to prevent unAUthorized acceSS tO SEnSItivE inFormation, naMely THe liVe feEDs FroM The IP CamerAs."  tHe ftC alleged that TRENDnEt MisrepResenTed the adequacY of its secuRITY measureS to cONsUMers, even while iT:
 "tranSmitted useR Login creDentiAls in cleAr, readablE TExt over tHe INteRneT, deSPItE the existence OF Free SoFtware, pUblIcly avaIlaBle SinCe aT lEast 2008, that wOuld have EnAbLeD rEspOndenT To secure SuCh tRaNsmIssioNS;
 storeD user LogiN cReDEntIals in cLEaR, REadaBlE tExt oN a uSeR's mobIle dEVicE, despitE the existEncE Of frEe SoFtware, pUblicly availaBlE since at leAsT 2008, thAt woulD HAve enablEd respondent to secure sucH Stored cRedEntiaLs;
 faIled to impLemEnt a prOceSS to actIvely mOnitoR sEcuRITy vulNERaBilItY reports frOM ThiRd-parTy ReseArchers, Academics, or other meMBerS of the public, dEspIte tHE ExIstENcE Of fReE TooLS To conduct such moNitoring, thErEBy Delaying thE OppOrTunity tO correcT discOVered vuLnerabiliTies or resPoNd to INCidEnts;
 failed To employ ReasonablE And apPRoPriatE seCurity In The DesigN and teSTinG of thE softwArE that iT provIdEd consumErs for its IP cameras" 
The CoMmissiOn votEd tO accept thE coNSenT agreemenT pacKage 4-0. "The FTC. DoeS noT have The LEgal aUthoRItY to IMpose FineS In such casES. BUt TrenDNet agreed to A CONseNt ordEr pROhibitIng sImilar practices, so THe commission haS the ABIliTy tO Seek PeNalties in the fuTurE."

CASE SettlemEnT -  January 16, 2014 
"TREnDnet's seTtLEment ProhibIts it fRom misrEPReSEnting The sEcuRity of its CamErAS or the sEcUrITy, privAcy, cOnFidentIality OR intEGRity of the informaTion tHAT
 compromised live feeds di splayed pr ivate  ar eas  o f us ers'  homes and all o wedthe unauthorized surve illan ce of i n fa nts s leeping in t hei rcr ibs ,y ou ng ch ild ren pla ying, andadu lt s engaging i n  t ypical dai lyactivities.The  breac hwas widel y r eport ed inn ews ar ticles on li n e, man y  of whi c h  f eatu red photos takenf ro m  the compromis ed liv ef ee d s  or  hy perlinks t oacces s  such f e ed s . Bas e d on the came ras' IP add r ess es, ne ws  st o ries a lso de p ict ed the geog raph ical loca tion ( e .g., ci t y and s tate)ofman y of th ecom pr o mis e dcam e ras ."  TREN Dn et  lear nedo f t he b rea ch o n Jan uary 13, 2012  wh en a cus tomer  whoread  a boutthe br eachco ntacted TRENDne t'stechnical  su pp ort  s tafft o repo rtthe  issue.  TRENDn e t r el e a s ed  a firmware update  d e s ig ned to r ectify th es oftware' svul nera b i lity,  hal t ed  the shi ppingn ew  p roducts  t o mark et , a ndspent "sub stanti ve resou rces" notifying allp revious custo m er s . 
T he F TC' s Complaint  Aga i nstTREN D NE T,I nc. -  Sept em b er 4, 2013  
The FTC's  C omplai nt id entified four  "practice s t hat, tak en t o ge t her, failed to  prov ide reason a ble secu rityto preve nt unauth o r ized acc ess  to  se nsi t i ve  information, n amel ythe liv e f eeds fr omthe  IP  ca me ras."  Th e FTC al le ge dth atTREND n et misre pr ese nt edthe a d equacy  of i ts s ec ur i tymeasure s  t o cons um er s, e ven  w hileit:"tr ansmitt ed user l ogi n  cre de nt ials in  clear, reada bl e text ove rthe  Inter n e t, despi te the existence of fre e  softwa re,  publ icly  availabl e s ince a t l e ast 20 08, th at wo ul d h a v e ena b l ed  re sp ondent tos e cur e suc htran smissio ns;
 stored user l o gin  credentialsinclea r ,  r ead a bl e  te xt ona user's mobile d evice, des pi t ethe existe n ceof  free s oftware , pub l icly av ailable s ince at l ea st 2 0 0 8,that would  have en abled res p onden t  t o sec ure  suchst ore d cre dentia l s; fail ed toim plemen t a p ro cess toactively monitor securi ty vul nerab ili ty report s f r omthird-par ty r esearchers , a cad emics , o r  othe r me m be rso f the  pub l ic, despi t ethe e xi stence of f r e e  to ols t o c o nductsuch  monitoring, ther e by delaying th e op p o rtu nit y  toco rrect discover edvu l n erabilit ie s or respon d to inc id e nts; faile d to e mploy r e a so n able a nd a ppr opriate s ecu ri t y in th ede s ign an d te st ing of  the s o ftwa r e  that it provide d con s u mersf orits I Pcameras "  
Th e Commissi on voted to  accep t th e con sent ag re ementpac ka ge 4-0. "T h e FTC. do es no t haveth e le gal  autho rity t o imp osefi nes  in suchc a se s .Bu t  TR ENDn et ag re ed t o a conse n t orderpro h ibiting  s imi l a r prac t ic e s , so the c omm issio n has the ab i lity to seekpenalt ies in  the fu t ure ." 

CaseSet t l ement - January 1 6 , 2 01 4 
" TRENDnet 's  set tl eme nt  prohibits it f rom misr epresent i n g thesec u rity of its  c ameras or th e sec ur i ty, pri v a cy,  confid e nti ali tyor i nte grit y  of the information that 
 compromised_live feeds_displayed private areas of_users' homes_and_allowed the_unauthorized_surveillance of infants_sleeping in their_cribs, young children playing,_and adults engaging_in_typical daily activities. The breach was widely reported in news articles online, many of_which_featured photos_taken_from_the compromised live feeds or_hyperlinks to access such feeds._Based on_the cameras' IP addresses, news stories also _depicted_the geographical location_(e.g., city and state) of many of the compromised
cameras."_ TRENDnet learned of the breach_on January 13,_2012_when_a customer who read_about the breach contacted TRENDnet's technical_support staff to report the issue._TRENDnet released a firmware update designed to_rectify the software's vulnerability, halted the_shipping new products to market,_and spent_"substantive resources" notifying all previous_customers.

The FTC's Complaint_Against TRENDNET,_Inc. - September_4, 2013  
The FTC's Complaint_identified four "practices_that, taken together, failed to provide_reasonable_security to prevent_unauthorized_access_to sensitive_information, namely the_live_feeds from_the_IP cameras."  The FTC alleged_that_TRENDnet misrepresented the adequacy of its security_measures to consumers, even_while_it:
 "transmitted user login_credentials in clear, readable text_over the Internet, despite the existence_of free_software, publicly_available since at least 2008, that would have enabled respondent to_secure such transmissions;
 stored user login_credentials in clear, readable_text on_a_user's mobile device,_despite_the existence_of free software, publicly available since at_least 2008,_that would have enabled respondent to_secure such stored credentials;
_failed_to implement a process to actively_monitor security vulnerability reports from third-party_researchers, academics, or other members_of_the_public, despite the existence of_free tools to conduct such monitoring,_thereby delaying the_opportunity to correct discovered vulnerabilities or respond_to_incidents;
 failed to employ reasonable and_appropriate_security in the design and testing_of_the_software that it provided consumers_for its IP cameras" 
The Commission_voted to accept the consent agreement package 4-0. "The_FTC. does not_have the legal authority to_impose_fines_in such cases. But TRENDnet agreed to a consent order_prohibiting similar_practices, so the_commission has the ability to seek penalties in the future."

Case_Settlement -  January 16, 2014 
"TRENDnet's_settlement prohibits it from misrepresenting the security of its cameras or_the security, privacy, confidentiality or integrity of the_information that