Passwords stolen from web portal Recently a website which provides e-mail service, kind of like gmail, but a smaller Estonian version of it got breached. The hackers got access to my e-mail and therefore all the accounts I have connected with this portal. They most likely stored the passwords in plain text, since I got some threat e-mails and they included my passwords in the threat e-mail to prove they have access to it. They claim to have some video recorded from my laptop camera, and ask for bitcoin payment to not leak it. I call it a bluff and most likely they don't have anything. Can I demand some compensation or even sue the company for having such a bad security layer on their portal? Or should I just accept it and move on?
Much of your ability to sue the email company for damages depends on local and Estonian laws, but the most important aspect is the TOS and user agreement you agreed to when you originally signed up for the service. Read it (though if the portal is now off-line, it may not be accessible). You may have agreed to hold the company not liable for any damages from loss or stolen data, and you may have also agreed to arbitration and to not pursue them in court. It all depends on what is (was) in that agreement, so find a copy of it; though it's possible that some local or Estonian laws may supersede any contractual agreement with the company. And FYI, the email you received concerning the video and demanding payment in Bitcoin is a common scam right now, and the threat may indeed be meaningless.
You violated Facebook's Terms of Service, and it's entirely within your contractual agreement with them for them to close your account. You agreed to abide by the contract you "clicked through" when you signed up and opened a Facebook account. They didn't break any laws when you broke your contract with them. You clearly broke the contract by violating the TOS. They are not breaking any laws by not restoring your account. What you see as the value of your personal or business data doesn't really mean anything; it was your choice to use Facebook in the first place, and your mistake to break the TOS. You could try hiring a lawyer to make a case that you see a difference between the personal data you want to retrieve and the business data that caused the violation, but that's up to you; Facebook is under no legal obligation (this could be different, according to your jurisdiction and national laws) to restore any or all access to your account or data, but it's possible they could be persuaded.
The words "proprietary format" are important. Are you sure the format is proprietary? If it is, then it's likely protected in which case they might have grounds to sue (but that does not mean they would definetly win). If the format is not proprietary, and so long as you don't share data which is proprietary then I believe you fine. I'm not a lawyer - but I cite GIF files as an example. They were still protected by the US and some other countries until at least the late 90s and there were various threats to open source linux companies who shared code that used the file format. I'm not aware of anything other than threats and never heard of any company being sued, let alone winning or losing. Another example that comes to mind is the RedHat ISO format. My understanding is RedHat could not stop anyone from sharing open source, but they could prevent folks from sharing the format they assembled and shared the open source. Again, I am not sure if it was ever tested in any court of law anywhere.
Yes One could certainly put up a site whose only content was a link to another domain. And I can't find any law which this would violate. If the link is a &quot;deep link&quot;, and if it bypasses a log-in page, while the other site is so designed that all access is intended to go through the login, I believe (but cannot at the moment verify) that the owner of the other site could claim that this violates their copyright. In any case it is not a good idea.But a link to an appropriate page should have no problem, nor should pointing your domain at an appropriate entry page. Therefor, since simply re-pointing a domain should have the same effect as simply linking, in those cases where it works at all, it should be legal. Doing it with an iframe, which would truly open another site within your site, may not be if the other site forbids such use, as in the ToS. The case law on that is not settled, but many sites object to it, as the answer by @BlueDogRanch points out. I don't see a good reason why one would want to do this, but that isn't the question. Copying the HTML of another site and modifying the URLs while keeping the content the same would pretty clearly be a copyright infringement, besides being a lot of work to little obvious point. It also isn't what the question asked about. Building a one-page site that has only a simple link or a redirect would clearly be legal, and would serve the purpose of causing your domain to lead a user to another site, but it isn't, strictly speaking, what was asked about either.
You're misreading the law. You need to keep reading the section you referenced (emphasis added): The disclosure...shall be made in writing and delivered through the consumer’s account with the business, if the consumer maintains an account with the business, or by mail or electronically at the consumer’s option if the consumer does not maintain an account with the business Thus, the option to have the disclosure sent by mail only applies to consumers who do not have an account with the business. Since presumably a large number of sites only maintain personal information for users with accounts, such sites need not provide a mail option. Further, it doesn't say there needs to be a button: you just need the ability to say you'd like it mailed to you in the request somehow, and then they need to comply when you do.
A creative prosecutor could probably come up with a raft of charges. But you could start with the federal wiretapping statute, 18 USC 2511, and the anti-hacking statute, 18 USC 1030. Here is an indictment brought in 2012 under the anti-hacking statute against someone who distributed and used this kind of software. Depending on the facts and the jurisdiction, this may also constitute the tort of intrusion on privacy or seclusion, a tort recognized by the Restatement (Second) and actionable in many jurisdictions. The most common test is whether the invasion would be "offensive to a reasonable person." And no, contrary to the commenter's view, a "click to accept" license is not a get out of (literal) jail free card here. Courts interpret adhesion contracts liberally to favor the signer, and outrageous terms hidden in small print are not guaranteed to be enforceable, especially if the software is clearly designed to trick people into installing it. The license terms might even hurt you, by providing evidence of your intent to use the software for perving rather than its ostensible use. This is not an exhaustive list, and there may be additional state-level statutes that apply. Bottom line: yes, this is clearly illegal, and the courts will be reluctant to let you trick people into getting away with it.
You ask permission, preferably with legal counsel to handle the details. It really is that simple. Unsurprisingly, most companies don't want to give their code away- especially to a competitor. If you even get a response, they will expect something in return i.e. money. Realistically though, it's unlikely they will respond, much less deal with you.
The most minimal elements of theft are: An unauthorised taking or use of another's property; and An intent to permanently deprive that person of that property or its use You've authorised the fee as per the terms of service that you agreed to. If you didn't read the terms of service, you are deemed to have read it. As the first element is not satisifed, no, it's not theft. As to what that fee is for, it's not really a question of law, but because they're a business and they are entitled to recover the costs of providing products or services and make a profit when you use their products or services, I fairly confidently would say that they're charging you to recover the costs of providing you their products and services as well as to make a profit from your use of their products and services. But again, not a question of law.