Every now and then, many of us get the strange feeling someone’s watching us. Given how easy it is these days for companies to gather information about where we are, what we’re doing, and how we’re doing it, this may well be more than a feeling.

Even so, here’s one that really takes the cake:

The FTC has taken action against Aaron’s for allegedly enabling some of its franchisees to use software that allowed them to spy on and collect personal information from customers. Without consumers’ knowledge or consent (but with Aaron’s knowledge) Aaron’s franchisees gathered personal data – including usernames and passwords for email accounts, social media websites, and financial institutions – as well as private details of their customers’ lives. The software captured screenshots of medical information, Social Security numbers, and financial statements. Through the computers’ webcams, the software secretly took pictures of anyone within view of the lens. In some instances, it captured pictures of children, individuals not fully clothed, and other highly personal images. What’s more, the software generated fake registration forms that tricked people into providing personal information. Anyone renting these computers was unable to detect, let alone uninstall, the software.

Rent-to-own stores had been using this kind of software to shut down computers when customers got behind on their payments. But to activate the spying features of the software, Aaron’s franchisees had to access the software manufacturer’s website – which many franchisees could do only with the help of Aaron’s computer network and technology staff. 

This case outlines one of the many ways companies can gather even the most intimate details about you – not just from computers, but from mobile devices, the use of savings cards, and other things you use and do day-to-day. Learn what to do to secure your computer, protect your personal information and fight identity theft. And, please, file a complaint with the FTC if you suspect a company or individual has violated your privacy or other consumer rights.