Upromise, which is owned by Sallie Mae, has settled with the FTC over allegations that it failed to keep customer data secure.
"Upromise, which adds small amounts of money to a savings account when users buy items from their partner merchants, asked users to download a 'TurboSaver Toolbar' so they could locate merchants that provide rebates," SC Magazine's Dan Kaplan writes. "The company encouraged customers to enable the 'Personalized Offers' component of the toolbar because, Upromise said, it would allow them to get more customized deals."
"The problem though, according to the FTC, is that information Upromise collected in order to provide those deals was transmitted unencrypted," Kaplan writes.
Go to "FTC settles with rewards company over security infractions" to read the details.
For regular security news updates, follow eSecurityPlanet on Twitter: @eSecurityP.