Latest in Gear

Image credit: anyaberkut via Getty Images

Avast packaged detailed user data to be sold for millions of dollars

The data doesn't include personal information, but experts fear it could be 'de-anonymized.'
1353 Shares
Share
Tweet
Share

Sponsored Links

anyaberkut via Getty Images

The popular antivirus program Avast has been selling users data to giant companies like Google, Home Depot, Microsoft and Pepsi, a joint investigation by Motherboard and PCMag found. Avast reportedly scraped data from its antivirus software and handed it off to its subsidiary Jumpshot, which repackaged the data and sold it, sometimes for millions of dollars. While Avast required users to opt-in to this data sharing, the investigation found that many were unaware that Jumpshot was selling their data.

The investigation incriminates a lot of big name companies. We don't know for certain which are past, present or potential clients, but the list includes Expedia, Intuit, Keurig, Condé Nast, Loreal and more. Microsoft said it doesn't have a current relationship with the company. Yelp said Jumpshot was "engaged on a one-time basis," and Google did not respond to Motherboard and PGMag's request for comment.

The data sold includes everything from Google searches, Google Maps location searches, activity on companies' LinkedIn pages, YouTube video visits and data on people visiting porn websites. The data is supposedly anonymized and does not include personal information, like names or contact info, but experts fear that it could be possible to de-anonymize certain users.

One product Jumpshot markets is an "All Clicks Feed," which tracks users' clicks across websites in precise detail. It's advertised as "Every search. Every click. Every buy. On every site." At least one customer, New York-based marketing firm Omnicom Media Group, signed up for the tool. According to Motherboard and PCMag, Omnicom paid Jumpshot $2,075,000 for access to data in 2019.

This isn't the first time Avast has run into data collection trouble. Just a couple months ago, Mozilla pulled Avast's Online Security and SafePrice extensions for Firefox, as well as Avast's AVG-branded equivalents, after they were found to be collecting much more data than necessary. Collecting and selling off this highly detailed info is especially troubling coming from Avast, a company whose primary function is to protect its users.

CORRECTION 1/28/2020 11:50AM ET: While Sephora was listed in the Motherboard/PCMag report, the company says it is not a client and has not worked with Avast or Jumpshot.

All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.
Comment
Comments
Share
1353 Shares
Share
Tweet
Share

Popular on Engadget

Lyft buys a startup that runs ads on top of ridesharing cars

Lyft buys a startup that runs ads on top of ridesharing cars

View
'Game of Thrones' duo will co-produce a Netflix series with Sandra Oh

'Game of Thrones' duo will co-produce a Netflix series with Sandra Oh

View
Flat Earth advocate dies after homemade rocket crashes

Flat Earth advocate dies after homemade rocket crashes

View
The best GPS trackers for cats and dogs

The best GPS trackers for cats and dogs

View
After Math: The rule of threes

After Math: The rule of threes

View

From around the web

Page 1Page 1ear iconeye iconFill 23text filevr