Walmart: Difference between revisions
Added image of ‘evil’ popup |
Data collection and data breaches |
||
(6 intermediate revisions by 4 users not shown) | |||
Line 3: | Line 3: | ||
{{InfoboxCompany | {{InfoboxCompany | ||
|Name=Walmart Inc.|Type=Public|Founded=1962|Industry=Retail|Official Website=https://www.walmart.com/|Logo=Walmart logo (2025; Alt).svg}} | |Name=Walmart Inc.|Type=Public|Founded=1962|Industry=Retail|Official Website=https://www.walmart.com/|Logo=Walmart logo (2025; Alt).svg}} | ||
[[wikipedia:Walmart|'''Walmart Inc.''']] is an American company known for its chain of retail stores and ubiquitous presence across many states and even countries. | |||
==Consumer impact summary== | |||
{{Ph-C-CIS}} | |||
==Incidents== | ==Incidents== | ||
=== | ===Facial recognition surveillance=== | ||
Walmart's first use of facial recognition software dates back to 2015 from an experimental, temporary program but has only grown since then<ref>{{Cite web |last=Roberts |first=Jeff John |date=9 Nov 2015 |title=Walmart’s Use of Sci-fi Tech To Spot Shoplifters Raises Privacy Questions |url=https://fortune.com/2015/11/09/wal-mart-facial-recognition/ |website=Fortune}}</ref><ref name=":0">{{Cite web |title=Facial Recognition in Walmart stores |url=https://www.securityvision.io/wiki/index.php/Facial_Recognition_in_Walmart_stores |website=The Security Vision Database}}</ref>. | |||
=== | |||
===AI surveillance=== | |||
It was reported in 2019 that Walmart uses AI-surveillance, internally dubbed ''Missed Scan Detection'' to monitor self-checkout as well as manned registers for the sake of detecting items that have not been scanned<ref name=":0" /><ref name=":1">{{Cite web |last=Peterson |first=Hayley |date=20 Jun 2019 |title=Walmart reveals it's tracking checkout theft with AI-powered cameras in 1,000 stores |url=https://www.businessinsider.com/walmart-tracks-theft-with-computer-vision-1000-stores-2019-6?r=US&IR=T |website=Business Insider}}</ref>. They do this using ''Everseen'', a facial recognition software based in Ireland, and it had only been reported on two years into Walmart's usage of the technology in which the company eventually confirmed it <ref>{{Cite web |last=Barkho |first=Gabriela |date=27 Jun 2019 |title=Walmart Confirms Use of AI-Powered Cameras to Detect Stealing |url=https://observer.com/2019/06/walmart-ai-cameras-detect-stealing/ |website=Observer}}</ref><ref name=":1" />. | |||
===Use of Clearview AI=== | |||
In February 2020, Buzzfeed News published a detailed report on the usage of [[Clearview AI]], a company that created AI-powered facial recognition software by scraping images all across the internet including social media accounts{{Citation needed}}. In their report, it was found that Walmart had conducted nearly 300 searches on the facial recognition software<ref>{{Cite web |last=Mac |first=Ryan |date=27 Feb 2020 |title=Clearview’s Facial Recognition App Has Been Used By The Justice Department, ICE, Macy’s, Walmart, And The NBA |url=https://www.buzzfeednews.com/article/ryanmac/clearview-ai-fbi-ice-global-law-enforcement |website=Buzzfeed News}}</ref>, indicating the use of AI software to personally identify Walmart shoppers. | |||
===App spyware via bluetooth=== | |||
Walmart uses a technology called ''[[bluetooth beacon]],'' a technology often found in physical retail locations used for precise indoor positioning<ref>{{Cite web |date=1 Jan 2024 |title=What You Must Know About Bluetooth Beacons Before Purchasing in 2025 |url=https://mapsted.com/blog/what-you-must-know-about-bluetooth-beacons-before-purchasing |website=Mapsted}}</ref>, particularly those with the Walmart app installed<ref name=":2">{{Cite web |last=Kwet |first=Michael |title=In Stores, Secret Surveillance Tracks Your Every Move |url=https://www.nytimes.com/interactive/2019/06/14/opinion/bluetooth-wireless-tracking-privacy.html |website=The New York Times}}</ref>. The technology works with a device often hidden on the top of shelving units inside of retail store that then connects with the smartphone device often through retailer apps, though this may include other spyware apps not owned by the actual retailer<ref name=":2" />. While many advertisers often use cellphone towers and GPS to track and advertise to consumers based on their location, bluetooth beacons are significantly more precise, particularly indoors where they are used in many places like airports and shopping malls<ref name=":2" />. This allows companies like Walmart to send precise location data of customers to third-party advertisers, allowing highly specific targeted ads depending on what aisle the customer happens to be standing in<ref name=":2" />. | |||
=== Data collection === | |||
Walmart collects an extensive amount of data, including specific personal and legal identifiers, as outlined in their privacy notice:<blockquote> | |||
* '''Basic Personal Identifiers''', such as name, telephone number, physical address, email address, government-issued identifiers (e.g., national identification numbers, driver’s license numbers), and signatures. | |||
* '''Device and Online Identifiers''', such as account login information, MAC address, IP address, cookie IDs, mobile ad IDs, and social media information. | |||
* '''Internet and Other Network Activity Information''', such as information about your browsing or search activity as well as your interactions with our websites, mobile applications, emails, or advertisements (for example keystroke patterns which help us determine if it is you or a bot who is interacting with us). | |||
* '''Commercial Information''', such as purchase and transaction history information (products or services you have purchased, rented, or returned), details about products associated with services you receive from or through us (e.g., car make, model, year, odometer reading, and Vehicle Identification Number when you visit our Auto Care Center), product reviews, travel and vacation information, and sweepstakes and contest entries. | |||
* '''Communications''', such as the content of emails, text messages, interactions with our bot (AI assistant chatbots), or other communications, call logs, and calendar information, where Walmart is a party to the exchange. | |||
* '''Demographic Information''', such as age, gender, citizenship, ethnicity, date of birth, family or marital status, household income, education, professional and employment information, family health, number of children, number of cars owned, and software or virtual assets owned. | |||
* '''Financial Information''', such as credit or debit card numbers, and financial account numbers. | |||
* '''Biometric Information''', such as voice prints, imagery of the iris or retina, face geometry, and palm prints or fingerprints. | |||
* '''Geolocation''', such as data about the location of your device, which may be imprecise (i.e., inferred from your device’s IP address). If you provide your consent, this data may be precise. For more information about precise geolocation, see the ''How Do We Collect Personal Information? > Collected Through Automated Means'' section below. | |||
* '''Sensory Information''', such as audio, visual information, and other sensory information such as photographs and audio and video recordings. | |||
* '''Background Information''', such as background checks and criminal convictions. | |||
* '''Inferences''', such as individual preferences and characteristics. This may include inferences drawn from and related to shopping patterns and behaviors, intelligence, and aptitudes. | |||
</blockquote> | |||
=== Walmart data breaches === | |||
With all this data collection in mind, including government ID's and personal text messages, Walmart has had many data breaches over the years, most notably between 2021 and 2024. | |||
==== Employees' 401k data ==== | |||
In April 2024, Walmart experienced a data breach of personally identifiable information for nearly 2,000 employees, including names and social security numbers, due to Walmart's retirement plan administrator sending an accidental email with the information<ref>{{Cite web |last=Kelly |first=Bruce |date=28 May 2024 |title=Merrill data bungle hits Walmart 401(k) plan |url=https://www.investmentnews.com/fintech/merrill-data-bungle-hits-walmart-401k-plan/253844 |website=Investment News}}</ref><ref name=":3">{{Cite web |date=17 Apr 2025 |title=Walmart Data Breach: What Happened and How They Solved It |url=https://www.strongdm.com/what-is/walmart-data-breach |website=StrongDM}}</ref>. Walmart responded by providing employees with identity theft protection for a rough total of $1 million<ref name=":3" />. | |||
===Refusal to refund older bricked Onn devices (''2025'')=== | |||
{{Main|Walmart's refusal to replace bricked Onn devices after forced update}} | |||
In June 2025, Walmart began updating their Onn streaming devices from Android 10 and 12 to 14. After the first attempt at the updates bricked older devices from 2021, Walmart's Onn customer support refused to grant refunds or replacements for devices over the one year manufacturer's warranty{{Citation needed}}. | |||
== | ==Lawsuits== | ||
===Illinois privacy laws=== | |||
Walmart is facing a class action suit for allegedly violating an Illinois privacy law by using surveillance cameras and Clearview AI's facial recognition database<ref>{{Cite web |last=Haskins |first=Caroline |date=6 Sep 2022 |title=Walmart is facing a class action suit for allegedly violating an Illinois privacy law by using surveillance cameras and Clearview AI's facial recognition database |url=https://www.businessinsider.com/walmart-is-facing-a-class-action-over-its-alleged-use-of-surveillance-cameras-and-clearview-ais-facial-recognition-database-2022-9 |website=Business Insider}}</ref>. | |||
===Weighted groceries settlement=== | |||
In 2022 a class action lawsuit was filed against Walmart in Florida mainly alledging that Walmart falsely inflated product weight, mislabeled weight of bagged produce and overcharged for sold-by-weight clearance products.<ref>{{Cite web |title=Amended class action complaint V. Kukorinis (and similarly situated) v. Wallmart Inc. |url=https://angeion-public.s3.amazonaws.com/www.walmartweightedgroceriessettlement.com/docs/Amended+Class+Action+Complaint.pdf |access-date=15 Mar 2025}} </ref> While Walmart denies any wrongdoing they agreed to pay $45 million to settle the case in 2024.<ref>{{Cite web |last=McCarthy |first=Kelly |date=8 Apr 2024 |title=How Walmart shoppers can qualify for cash from $45 million settlement |url=https://abcnews.go.com/GMA/Food/walmart-shoppers-qualify-cash-45-million-settlement/story?id=108987190 |access-date=15 Mar 2025 |website=ABC News}}</ref> | |||
==References== | ==References== | ||
<references /> | <references /> | ||
[[Category:Walmart]] | [[Category:Walmart]] |
Latest revision as of 12:08, 24 September 2025
❗Article Status Notice: This Article is a stub
This article is underdeveloped, and needs additional work to meet the wiki's Content Guidelines and be in line with our Mission Statement for comprehensive coverage of consumer protection issues. Learn more ▼
Basic information | |
---|---|
Founded | 1962 |
Legal structure | Public |
Industry | Retail |
Official website | https://www.walmart.com/ |
Walmart Inc. is an American company known for its chain of retail stores and ubiquitous presence across many states and even countries.
Consumer impact summary
[edit | edit source]
Incidents
[edit | edit source]Facial recognition surveillance
[edit | edit source]Walmart's first use of facial recognition software dates back to 2015 from an experimental, temporary program but has only grown since then[1][2].
AI surveillance
[edit | edit source]It was reported in 2019 that Walmart uses AI-surveillance, internally dubbed Missed Scan Detection to monitor self-checkout as well as manned registers for the sake of detecting items that have not been scanned[2][3]. They do this using Everseen, a facial recognition software based in Ireland, and it had only been reported on two years into Walmart's usage of the technology in which the company eventually confirmed it [4][3].
Use of Clearview AI
[edit | edit source]In February 2020, Buzzfeed News published a detailed report on the usage of Clearview AI, a company that created AI-powered facial recognition software by scraping images all across the internet including social media accounts[citation needed]. In their report, it was found that Walmart had conducted nearly 300 searches on the facial recognition software[5], indicating the use of AI software to personally identify Walmart shoppers.
App spyware via bluetooth
[edit | edit source]Walmart uses a technology called bluetooth beacon, a technology often found in physical retail locations used for precise indoor positioning[6], particularly those with the Walmart app installed[7]. The technology works with a device often hidden on the top of shelving units inside of retail store that then connects with the smartphone device often through retailer apps, though this may include other spyware apps not owned by the actual retailer[7]. While many advertisers often use cellphone towers and GPS to track and advertise to consumers based on their location, bluetooth beacons are significantly more precise, particularly indoors where they are used in many places like airports and shopping malls[7]. This allows companies like Walmart to send precise location data of customers to third-party advertisers, allowing highly specific targeted ads depending on what aisle the customer happens to be standing in[7].
Data collection
[edit | edit source]Walmart collects an extensive amount of data, including specific personal and legal identifiers, as outlined in their privacy notice:
- Basic Personal Identifiers, such as name, telephone number, physical address, email address, government-issued identifiers (e.g., national identification numbers, driver’s license numbers), and signatures.
- Device and Online Identifiers, such as account login information, MAC address, IP address, cookie IDs, mobile ad IDs, and social media information.
- Internet and Other Network Activity Information, such as information about your browsing or search activity as well as your interactions with our websites, mobile applications, emails, or advertisements (for example keystroke patterns which help us determine if it is you or a bot who is interacting with us).
- Commercial Information, such as purchase and transaction history information (products or services you have purchased, rented, or returned), details about products associated with services you receive from or through us (e.g., car make, model, year, odometer reading, and Vehicle Identification Number when you visit our Auto Care Center), product reviews, travel and vacation information, and sweepstakes and contest entries.
- Communications, such as the content of emails, text messages, interactions with our bot (AI assistant chatbots), or other communications, call logs, and calendar information, where Walmart is a party to the exchange.
- Demographic Information, such as age, gender, citizenship, ethnicity, date of birth, family or marital status, household income, education, professional and employment information, family health, number of children, number of cars owned, and software or virtual assets owned.
- Financial Information, such as credit or debit card numbers, and financial account numbers.
- Biometric Information, such as voice prints, imagery of the iris or retina, face geometry, and palm prints or fingerprints.
- Geolocation, such as data about the location of your device, which may be imprecise (i.e., inferred from your device’s IP address). If you provide your consent, this data may be precise. For more information about precise geolocation, see the How Do We Collect Personal Information? > Collected Through Automated Means section below.
- Sensory Information, such as audio, visual information, and other sensory information such as photographs and audio and video recordings.
- Background Information, such as background checks and criminal convictions.
- Inferences, such as individual preferences and characteristics. This may include inferences drawn from and related to shopping patterns and behaviors, intelligence, and aptitudes.
Walmart data breaches
[edit | edit source]With all this data collection in mind, including government ID's and personal text messages, Walmart has had many data breaches over the years, most notably between 2021 and 2024.
Employees' 401k data
[edit | edit source]In April 2024, Walmart experienced a data breach of personally identifiable information for nearly 2,000 employees, including names and social security numbers, due to Walmart's retirement plan administrator sending an accidental email with the information[8][9]. Walmart responded by providing employees with identity theft protection for a rough total of $1 million[9].
Refusal to refund older bricked Onn devices (2025)
[edit | edit source]In June 2025, Walmart began updating their Onn streaming devices from Android 10 and 12 to 14. After the first attempt at the updates bricked older devices from 2021, Walmart's Onn customer support refused to grant refunds or replacements for devices over the one year manufacturer's warranty[citation needed].
Lawsuits
[edit | edit source]Illinois privacy laws
[edit | edit source]Walmart is facing a class action suit for allegedly violating an Illinois privacy law by using surveillance cameras and Clearview AI's facial recognition database[10].
Weighted groceries settlement
[edit | edit source]In 2022 a class action lawsuit was filed against Walmart in Florida mainly alledging that Walmart falsely inflated product weight, mislabeled weight of bagged produce and overcharged for sold-by-weight clearance products.[11] While Walmart denies any wrongdoing they agreed to pay $45 million to settle the case in 2024.[12]
References
[edit | edit source]- ↑ Roberts, Jeff John (9 Nov 2015). "Walmart's Use of Sci-fi Tech To Spot Shoplifters Raises Privacy Questions". Fortune.
- ↑ 2.0 2.1 "Facial Recognition in Walmart stores". The Security Vision Database.
- ↑ 3.0 3.1 Peterson, Hayley (20 Jun 2019). "Walmart reveals it's tracking checkout theft with AI-powered cameras in 1,000 stores". Business Insider.
- ↑ Barkho, Gabriela (27 Jun 2019). "Walmart Confirms Use of AI-Powered Cameras to Detect Stealing". Observer.
- ↑ Mac, Ryan (27 Feb 2020). "Clearview's Facial Recognition App Has Been Used By The Justice Department, ICE, Macy's, Walmart, And The NBA". Buzzfeed News.
- ↑ "What You Must Know About Bluetooth Beacons Before Purchasing in 2025". Mapsted. 1 Jan 2024.
- ↑ 7.0 7.1 7.2 7.3 Kwet, Michael. "In Stores, Secret Surveillance Tracks Your Every Move". The New York Times.
- ↑ Kelly, Bruce (28 May 2024). "Merrill data bungle hits Walmart 401(k) plan". Investment News.
- ↑ 9.0 9.1 "Walmart Data Breach: What Happened and How They Solved It". StrongDM. 17 Apr 2025.
- ↑ Haskins, Caroline (6 Sep 2022). "Walmart is facing a class action suit for allegedly violating an Illinois privacy law by using surveillance cameras and Clearview AI's facial recognition database". Business Insider.
- ↑ "Amended class action complaint V. Kukorinis (and similarly situated) v. Wallmart Inc" (PDF). Retrieved 15 Mar 2025.
- ↑ McCarthy, Kelly (8 Apr 2024). "How Walmart shoppers can qualify for cash from $45 million settlement". ABC News. Retrieved 15 Mar 2025.