An Internet business that sold people’s telephone and credit-card records has agreed to settle charges that it violated U.S. law, the U.S. Federal Trade Commission (FTC) said Thursday.Integrity Security & Investigation Services and its owner, Edmund Edmister, will give up $2,700, the entire amount the company earned from selling phone records and credit card transaction reports, the FTC said. The settlement also bars the company from obtaining and selling confidential phone and credit account records unless authorized by law or court order.The FTC in May filed federal court complaints against five Web-based operations allegedly engaged in pretexting, attempting to obtain phone or other personal records from companies by pretending to be the targeted customer. Integrity Security & Investigation Services is the first firm to settle with the FTC; charges are still pending against the four remaining companies.The U.S. Congress has been investigating pretexting since early this year, but the practice gained national attention last month when Hewlett-Packard (HP) officials revealed pretexting had been used to gain access to the phone records of employees, board members and journalists. Private investigators employed by HP allegedly used pretexting in an investigation of board leaks in 2005 and 2006. The agency dismissed charges against F. Lynne Moseley and Tracey Edmister, Integrity Security & Investigation Services corporate officers. The FTC determined they played no role in operating the business.By Grant Gross, IDG News Service (Washington Bureau) Visit our HP Spying Scandal page for more coverage of this unfolding story.Keep checking in at our Security Feed for updated news coverage. Related content news Okta launches Cybersecurity Workforce Development Initiative New philanthropic and educational grants aim to advance inclusive pathways into cybersecurity and technology careers. By Michael Hill Oct 04, 2023 3 mins IT Skills Careers Security news New critical AI vulnerabilities in TorchServe put thousands of AI models at risk The vulnerabilities can completely compromise the AI infrastructure of the world’s biggest businesses, Oligo Security said. By Shweta Sharma Oct 04, 2023 4 mins Vulnerabilities news ChatGPT “not a reliable” tool for detecting vulnerabilities in developed code NCC Group report claims machine learning models show strong promise in detecting novel zero-day attacks. By Michael Hill Oct 04, 2023 3 mins DevSecOps Generative AI Vulnerabilities news Google Chrome zero-day jumps onto CISA's known vulnerability list A serious security flaw in Google Chrome, which was discovered under active exploitation in the wild, is a new addition to the Cybersecurity and Infrastructure Agency’s Known Exploited vulnerabilities catalog. By Jon Gold Oct 03, 2023 3 mins Zero-day vulnerability Podcasts Videos Resources Events SUBSCRIBE TO OUR NEWSLETTER From our editors straight to your inbox Get started by entering your email address below. Please enter a valid email address Subscribe