One security researcher showed that he can unlock some of the company’s smart locks within seconds by simply unscrewing the back panel.
“Tapplock did not take reasonable measures to secure its locks or take reasonable precautions or follow industry best practices for protecting consumers’ information,” according to the FTC in its complaint.
According to the Commission, Tapplock’s deceitful or false advertisement is a violation of Section 5 (a) of the FTC Act.
In a statement, FTC Bureau of Consumer Protection Director Andrew Smith said, “We allege that Tapplock promised that its Internet-connected locks were secure, but in fact, the company failed to even test if that claim was true. Tech companies should remember the basics—when you promise security, you need to deliver security.”
Under the proposed settlement agreement, the Canadian IoT company is prohibited from misrepresenting its privacy and security practices. In addition, it is required to submit third-party assessment of its information security program every two years. The FTC will approve the assessor.
