A tiny business that sold consumers phone records and records of credit card accounts over the Internet is very sorry and promises not to do it again. And no more pretexting, either.

The willfully misnamed Integrity Security & Investigation Services ISIS and its owner, Edmund Edmister, will cough up all ill-gotten gains - a whopping $2,700 - to the Federal Trade Commission (FTC).

Last May, the FTC filed charges against ISIS and four more web-based data brokers, accusing them of illegally obtaining and selling confidential cell phone and credit account records. With today's settlement, ISIS is now out of the legal loop. Litigation continues against the other four.

The charges follow an undercover investigation by the FTC, with a little help from US cellcos Cingular, Sprint, and Verizon. FTC staffers surfed the net to identify American firms selling consumers' phone records. Then they posed as clients [hey - is this White Hat pretexting? - Ed] to complete undercover purchases of the phone records. The FTC followed this up with warning letters to operators of 29 websites that continued to advertise the sale of phone records to the public.

FTC announcement here. ®

Related stories

• Silicon Justice Dumpy Senate clears pretexting bill after show trial (14 December 2006)
• HP's newest board member a pretexting veteran (20 November 2006)
• Indian data theft 'exposed' (5 October 2006)
• Social networkers risk losing their identities (4 October 2006)
• US phishing ring members admit fraud charges (27 September 2006)
• ID theft hits home in Canada (4 September 2006)
• FTC sues over mobile phone records sale (4 May 2006)
• Infosec blog All my personal details for chocolate? Go on then (18 April 2006)
• US hit for $548m in fraud losses (2 February 2005)