Multiple employees have said to be allegedly abusing their access to private user data, Motherboard reveals.
According to two former employees, Snapchat have dedicated tools that can access consumer data, and it is these tools that are being abused be employees. Employees could view user location information, saved Snaps, phone numbers, and email addresses.
SnapLion is one of the internal tools that could be used to spy on users. It was originally utilised to gather information on users when law enforcement requested it, however access to the tool has expanded across multiple departments. Allegedly a department named “Customer Ops” and security staff had access to SnapLion.
Motherboard reported that it remains unknown if the access to user data was abused, however they pointed that the alleged ‘spying’ took place years ago.
Mayank Choudhary, senior vice president at ObserveIT commented:
“The incident highlights the risks posed by insider threats. Most of the employees are busy doing their day-to-day jobs but a handful have malicious intent thus causing harm to the organizations they work.”
Snapchat has stated that the allegations are inaccurate. A snapchat spokesperson wrote in an email:
“Any perception that employees might be spying on our community is highly troubling and wholly inaccurate.
“Protecting privacy is paramount at Snap. We keep very little user data, and we have robust policies and controls to limit internal access to the data we do have, including data within tools designed to support law enforcement.
“Unauthorized access of any kind is a clear violation of the company’s standards of business conduct and, if detected, results in immediate termination.”
Registration now OPEN for PrivSec Global
Taking place across four days from 30 Nov to 3 Dec, PrivSec Global, will be the largest data protection, privacy and security event of 2020.
Reserve your place today and gain access to the entire event free of charge. With all sessions available to view live or on-demand, you can build a personalised agenda based on your key focus topics and make the event fit around your work schedule.
We have been awarded the number 1 GDPR Blog in 2019 by Feedspot.