Egghead Customer? Your Data Goes To Fry's 213
An anonymous reader says: "I bought some things from onsale.com, which then became egghead.com. Somewhere in that time, their credit card database got jacked, for which they sent me a nice e-mail saying everything was ok. Now I've got a mail that I don't like at all, with the subject 'IMPORTANT MESSAGE REGARDING THE TRANSFER OF YOUR CUSTOMER INFORMATION.' Well. that's pretty much it. egghead.com info will go to Fry's Electronics, unless the customer explicitly requests that it not. How often does it happen that when a company goes under that they just sell their customer info and just not tell anyone?"
Here are links to the Egghead info page and privacy and security policy.
The big question is... (Score:3, Funny)
Re:The big question is... (Score:1)
the history of Fry's electronics, INC. [frys.com]
Right to privacy (Score:1)
You should be happy (Score:3, Flamebait)
What is the default status of customer records? (Score:2)
As a corolary, are companies who aquire assets of another company, bound by the agreements made by that other company? I believe as a general matter of law, this is dependant on the contract in question, but with respect to customer information, is there not a defacto contract in place, governed by the terms of the company's (the company being aquired) privacy policy? Are privacy policies transferable such that they continue to be in force with respect to the data over which they originally had effect?
Since I am not a lawyer, I don't have the answers to these questions but I believe my understanding is sufficient to have properly posed them with respect to the legal status in question.
--CTH
No... (Score:1)
-Legion
Re:No... (Score:1)
Re:No... (Score:1)
Not Too Long Ago... (Score:2, Insightful)
In this day and age of information though, information is an asset. Yours and likely an asset of any company you provide it to. Remember, you're not being made to give out your personal info, you're providing it in exchange (along with money sometimes) for a service.
What conditions were on the transfer of info? (Score:2, Insightful)
case study (Score:3, Interesting)
in the fall of 2000, toysmart, an online toy retailer partly owned by the walt disney corporation, filed for chapter 11 bankruptcy, and announced that it was including its customer data base as one of the assets to be liquidated. disney had injected $45 million into toysmart but finally pulled the plug in may 2000, and shortly after toysmart filed for bankruptcy.
it then emerged that toysmart considered its database of customer information to be a liquidisable asset, that it would sell, in effect, to the highest 'trustworthy' bidder.
the federal trade commission disagreed with toysmart, and for a while considered blocking the sale, before finally allowing it to proceed under restricted conditions. notably, these conditions did not include any obligation on the part of toysmart's creditors to either inform or obtain permission from toysmart's customers. in the end, the data did not provoke a bidding frenzy: the highest offer had come from disney itself ($50,000), with the next highest offer being $15,000 from a market research firm in maine.
for more info search google, cnet, etc., with relevant terms.
I got this email also (Score:5, Interesting)
I tried the link to opt out, but you have to have a user id and password to do this! I don't have them because the criminal who stole my CC created them.
As a result, there is no way for me to get them to remove my personal info, which wasn't supposed to be in their database in the first place!
Egghead.com was also cracked about a year or so ago. They have a very poor track record of safeguarding their customers' information.
Things like this make me want stricter privacy controls for personal information.
Re:I got this email also (TOLL FREE #) (Score:1)
The number is 1-800-EGGHEAD (Mon - Fri 7AM - 5PM PST).
you CAN opt out! (Score:2)
http://www.egghead.com/ShowPage.dll?page=b_1_op
... and you don't need a password, it asks for your username and email address. Plus, it's just a mailto form anyway, so compose a message to the address and ask to be opt-ed out.
Furthermore, call 1-800-EGG HEAD to get a customer service representative for help if the above process doesn't seem to work.
Try the proceedure before you panic and say they're screwing you over! Remember, egg head no longer has anything to lose by 5% of their customers opting out this way.
Re:I got this email also (Score:1)
Re:I got this email also (Score:2)
There are 100,000,000 people in the USA (again, give or take an order of magnitude).
What are the odds that a randomly generated number is a real one?
Re:I got this email also (Score:1)
Re:I got this email also (Score:5, Informative)
Let's see:
(1^15 credit card numbers) * (1^5 zip codes) * (roughly 48 expiration dates over a 4 year card life) = NO CHANCE IN HELL OF GUESSING IT RANDOMLY
Re:I got this email also (Score:1)
that's why i use exactly ONE card online with an incredibly low limit... then, just in case someone does get it, they can't try to wipe me or any business out...
Re:I got this email also (Score:1)
All you need to charge someones credit card is the number. There is no verification of the exp date, name, street address, etc.
CC# are not very random at all (Score:5, Informative)
Re:I got this email also (Score:1)
What are the odds that a randomly generated number is a real one?
Pretty good. most credit card generators generate only valid numbers. There's no real reason to try, though, as it's so easy to steal them. Next time you go buy gas, see if somebody has left their receipt lying around or tossed it in the can.
Re:I got this email also (Score:2)
Re:I got this email also (Score:1)
Anyhow, besides the CC# one generally would need expiration date, bank name, billing address, etc to do anything with it...
Re:I got this email also (link) (Score:1)
http://it.asia1.com.sg/v2/specials/crime20010627_
Nothing to see here. Move along. (Score:3, Funny)
Re:Nothing to see here. Move along. (Score:1)
I tried (Score:3, Informative)
Re:I tried (Score:1)
I succeeded (Score:2)
All of this in Konqueror, so not even a hassle that I don't have one of the "big two" browsers.
Of course, if you're paranoid, there is the question of whether they will honor it...
Re:I succeeded (Score:2, Funny)
So, do you normally cry when you buy things?
-Mark
Re:I tried (Score:2, Informative)
http://www.1tightass.com/fast/vids/movies/r2.mp
...
----- The following addresses had transient non-fatal errors -----
----- Transcript of session follows -----
... while talking to smtp02.egghead.com.:
>>> RCPT To:
... Deferred: 452 4.2.2 Mailbox full
Warning: message still undelivered after 8 hours
Will keep trying until message is 3 days old
...
Re:Nothing to see here. Move along. 'Nuff said. (Score:1)
Re:Nothing to see here. Move along. (Score:1)
FP
Have YOU tried to opt out? (Score:1)
NO YOU CAN'T.
I tried after getting the e-mail and it didn't work for me. So erase #2 from your list. Points 1,3, and 4 are still valid. And I'll settle for just the $100, thanks.
No way things can change... (Score:3, Insightful)
Re:No way things can change... (Score:3, Funny)
-
GPL isnt only for software anymore!
Re:No way things can change... (Score:1)
Egghead/Onsale. (Score:2)
Then Egghead purchased Onsale. At first Egghead did a decent job of keeping up the auctions, even imitating Onsale's not-so-hot web page design. Over the past year or two, the auctions have really fizzled - you can hardly find anything worth bidding on.
Then there was the incident where the credit card database was cracked. This did not make any Egghead customers very happy. Add to that the fact that many of their retail items were either overpriced or out of stock, the site quickly went to the bottom of the list from which I purchase computer equipment.
I am not saddened to see the company go under - they brought it upon themselves.
Actually, the purchase was the other way around (Score:2)
Onsale's management figured Egghead had the better-known brand name, so the combined companies went ahead under the Egghead name.
That's why the auction pages looked an awful lot like Onsale's...
Whether we like it or not, customer information is a company asset - and when someone purchases a company they buy all the assets available. Including our information.
Customer Information is an Asset (Score:1)
Customer info is one of the primary assets a business has to sell. If I were in a position to buy an existing business, I would require the customer list as part of the deal. What would be bad is if the company was just selling the info to any Tom, Dick, or Harry that wanted it.
Just having the customer info is no guarantee of customer loyalty or repeat business. As long as it's only going to the successor company, I don't have a problem with it, but they will have to work to retain my business.
Re:Customer Information is an Asset (Score:1, Interesting)
My travel agency was recently bought by another one, meaning they had to throw away their customer database (although practically nothing much but the name of the company has changed - same employees, same computers...) but gave slight fare reductions for old customers who would come back.
OPT-IN is the way to go!
Re:Customer Information is an Asset (Score:1)
Canadian policy regarding info transfer (Score:2, Interesting)
I'm just not sure if this was passed already or not. I guess I should find out, being Canadian and all.
Angry White Guy
--Consience is a hinderance only afforded by the common man
Customer Data (Score:2)
We don't have as much privacy you expect, credit card companies, insurance companies, banks, etc, exchange data without your permission, due to fraud and credit reporting. Even with government databases, they love selling drivers license information to companies.
Re:Customer Data (Score:1)
the changes that will take place in info (Score:4, Interesting)
Information's nature will change soon.
On NPR [npr.org] today, someone was explaining the use of electronic information as a possible alternative to ethnic, cultural, or social profiling of airplane passengers and other people who frequent public places.
The security officials would use credit-card data, bill and purchase data, phone records, and bank data in order to verify that you have an established address, haven't moved around too much or done anything that provokes suspicion.
In effect, we will all have different "clearance levels" in regular civilian society, which will decide for us whether we are stopped, interviewed, strip searched; what our freedom of movement and consumer activity will be; and what kinds of security-vital private sector training, such as computer or pilot skills, that we can enjoy.
Re:the changes that will take place in info (Score:2)
Start a national database with information from DMV, Telephone, Bank, Credit Card, IRS.
Put security clearances on peoples ID. And heck, You can already be detained if you dont have an ID.
-
You must be CCL 3 to fly this flight.
Re:Paranoia flashback (Score:2)
Citizen Foobar! What is that you're doing? You just got off that escalator! Can't you see that's an Orange escalator? You know that you only have Red clearance, and are supposed to use the Red Rope that's hanging outside the window, over the moat with the spikes in it. What if someone with Orange clearance had needed that escalator, and had to get out of your way? Report for Termination immediately (in that Blue booth right there), and have a nice day!
Re:Paranoia flashback (Score:1)
Re:the changes that will take place in info (Score:1)
Anyhow
Jeremy
European Union rules (Score:2)
Re:European Union rules (Score:2)
The European Directive on Data Privacy is only effective against corporations with reasonably significant financial resources inside the jurisdiction of the European Union; for example, Siemens. I haven't read it recently, but from what I remember, it wouldn't allow a claim of jurisdiction simply based on the location of an e-mail server.
Move to the EU: then you'll get its protection.
Account problems (Score:2)
After I got the "we're selling you to Fry's" email I decided to opt-out but it wouldn't accept my username and password, nor could I recover my password (via their website). I thought maybe my username was incorrect, but as far as I can tell that is not the case.
I'm wondering if my case is unique. I'm also wondering why I need a user name to opt-out. Why isn't my email enough? If I have that email setup for multiple users, then I can opt-out of all at once. I'm going to call customer support as well, but that will have to wait until Monday (thanks for the email Saturday, so that way hopefully I'll forget to opt-out by Monday).
Of course, I'm assuming that their website is actually working properly. I have order numbers and tracking numbers for previous orders, perhaps I should just email those en masse to customer support and let them deal with it.
They are purposely making it difficult (Score:1)
I think that they are trying to make it difficult so that nobody is able to opt out. That way they have more data to sell to Fry's, home of the 90-day free rental!
Is Fry's even online? (Score:2, Informative)
Why would Fry's not have any online presence? The obvious answer is that there is nobody in the organization who has the competence to do so.
I would submit that Fry's is not only unaware of the security issues related to "personal data", but guaranteed to screw it up.
Re:Is Fry's even online? (Score:1, Insightful)
Yes, Fry's has a web site (frys.com) but no online store. They bought up outpost.com and egghead.com. It seems logical that now they have an online store. Why reinvent the wheel when you can buy a company in the toilet instead?
With that in mind, I don't see the big deal about the customer database. It's Egghead.com -> Frys.com now. They didn't sell it for the assets, they were bought out.
Re:Is Fry's even online? (Score:2)
No, it means that for whatever reason, Fry's has chosen not to have an online presence; it's not like they can't find someone to design a website -- it seems to me that competent (or even half-competent) web designers are a dime a dozen, esp. with the dotcom implosion.
Fry's doesn't let its reach exceed its grasp. When Fry's opens a store, it already owns the property, building and inventory outright -- as in, they don't take out loans to start stores, so there's no rush to profitability in order to cover loan payments.
I would submit that Fry's is not only unaware of the security issues related to "personal data", but guaranteed to screw it up.
Actually, as a Fry's employee, I can tell you that our customer database isn't all it's cracked up to be as it is. I've worked returns, where we have the ability to pull up information on a transcation even if you don't have your receipt (the receipt helps things immensely, though) by CC number, bank account number (if a check was used), customer number, etc.
When I think of the number of people who have multiple customer numbers that come up when I do a search based on method of payment (so far as I can tell, the cashiers don't bother to look up a customer, they just create a new entry), I'd have to imagine that our database is about as valuable a resource for customer profiling as Hotmail's is...
Jay (=
This is why I don't buy stuff on-line. (Score:2)
But lets face it. Even now, after the "dot bust" or whatever it is called today, there still are sites that are getting hacked, Internet companies that are going bankrupt, etc. And everytime that happenes, my personal information is in danger of becoming public, or that it falls into the wrong hands.
I know dozens of people, some of them my friends, who have had their credit card numbers stolen. My best friend lost $400 on his VISA, and if it wouldn't have been for the fraud protection, he would be in a deep hole right now (we're students, we're not rich people). Losing money is the worst thing that can happen, but what about the little things? I'm getting 10-15 spam emails a day, and this is after some pretty drastic filters. But I know people who keep getting them in the hundreds. (I went on a trip this summer for a monts, and I had about 600 new messages). And there are many more reasons...
And to top it all off, these companies are treating the information that you give them as something to sell. WHEN IT'S NOT EVEN THEIRS TO BEGIN WITH!!!!!!!!!!!! It's MY credit card number, it's MY name, MY address, MY age that I inputed into their database. And yet they sell it off!
Don't get me wrong, I love the ideea of going on-line and shopping with GrogeryGateay.com, or buying anything, ordering any services online. But I'm definitely not going to do it untill I'm certain that my info and my money are safe. And ATM, no matter what anybody will say, they're not!
Re:This is why I don't buy stuff on-line. (Score:3, Insightful)
Sadly, even simple, 10 minute code jobs like PGP encrypting the customer's payment details before storing them on the server are beyond most online sites. And that is very sad. My company PGP encrypts all online payments before saving them on the server, and they are only decrypted on a computer that is not connected to the Internet (even though this is not as easy as getting an email with all the details in plain text (which other sites do after the https part of the deal anyway!)). After processing, the details are deleted.
SPAM has got much worse this year. Last year I got very few, this year I also get 10 or so a day on my personal email account, despite always having it spam-proofed one way or another. Action needs to be taken against spammers.
Anyway, the companies T&Cs will give them the right to sell on the information you provide if they so desire.
Re:This is why I don't buy stuff on-line. (Score:2, Informative)
It's for this exact reason that I'm yet to purchase anything from a web site, save for my now non-existant domain name.
Oh c'mon. Do you think that your credit card numbers are safe when you buy something offline? Do you think offline companies don't sell your information? There's no difference, it all depends on the specific security and privacy policies of the company, not whether the company is online or offline.
My best friend lost $400 on his VISA, and if it wouldn't have been for the fraud protection, he would be in a deep hole right now (we're students, we're not rich people).
But there is fraud protection. If they don't have a signiture or other proof that you authorized the purchase, they can't make you pay for it. Credit card numbers are merely numbers, no more.
Re:This is why I don't buy stuff on-line. (Score:2)
You appear to be under the impression that non-online retailers do not keep electronic databases of credit cards, and, in the cases when they do, their databases are never broken into.
Dot-coms aren't the only targets of credit card fraudsters, ya know. ;)
I could be wrong but... (Score:1)
How often? Every second of the day. (Score:1, Informative)
But they also do more respectable business. Like they used to manage Dillard's warehouse stock information. They'd kick the data around and tell them what's selling where, what to order more of, and where to ship it at what time of the year. Pretty cool stuff actually.
~LoudMusic
Keeping Them Out of Your Face (Score:4, Informative)
For telemarketers, finding out their company, the company they represent and the first and last name of the person you're talking to before you ask them to add you to their do-not-call list is the way to go. Log that information and sue them if they ever call you again.
For spammers your choices are more limited, especially if you don't run your own mail server. It is next to impossible to not download spam, although you can process it in such a way that you never see it. There are two solutions I like the most. The first is to keep a whitelist of people who are allowed to send you E-Mail. You can store the E-mail of anyone who has sent you mail and isn't on the list and require them to reply to a message to get added to the white list. Purge any such stored messages after a week or so. The other alternative is to reject any E-mail that's not encrypted to your obnoxiously long encryption key. A 4096 bit key takes about 30 seconds to encrypt to for a 1 page message on a P166. No spammer's going to take the time (Nor would they be capable of taking the time, if everyone did this.)
For internet banner ads and more obnoxious features of the web, I've found that disabling popups and animations in Mozilla makes things a lot less annoying. YMMV depending on your web browser.
And of course, if you know a company is likely to sell your information without your permission, don't do business with them and tell them why.
We're already constantly on the verge of information overload (or well past the verge) without some company you never heard of buying your info and jamming more advertising down your throat. Pursuing your privacy like a rabid pit-bull is the only way to avoid having this happen.
Misinformation (Score:1)
Re:Misinformation (Score:1)
They didn't bother to notify ME. I just found out because I read slashdot. And I have been an Onsale customer for about 4 years.
and give them a chance to OPT OUT [egghead.com] of the information transfer.
Their web form doesn't work. It just pops up a blank "mailto" window. I assume that "user name" also means number, because when I first started, all customers were just numbers
Re:Misinformation (Score:2)
If the new company *does* contact you, without warning, *then* I would be concerned...
Enough opt-outs, and Fry's drops the deal! (Score:4, Informative)
Check this article about it on CNet:
http://news.cnet.com/news/0-1007-200-6962164.ht
Unscribe didnt work... (Score:1)
I want my cut. (Score:1)
Looks like you got told. (Score:1)
Comment removed (Score:4, Funny)
Uh (Score:1)
Egghead opt-out not currently an option (Score:1, Informative)
----- Transcript of session follows -----
... while talking to smtp02.egghead.com.:
>>> RCPT To:
... Deferred: 452 4.2.2 Mailbox full
Warning: message still undelivered after 4 hours
Will keep trying until message is 5 days old
Re:Egghead opt-out not currently an option (Score:1)
Of course slashcode stripped half of the text out of the message...
I don't see what the problem is. (Score:2)
Fry's electronics bought a part of Egghead (the part that had your customer data.
The bottom line is that one company had your information in the beginning and now one company, which is a dirivative of that first company, has that same info.
And what's the worse they can do with that information? Try to give you a good deal on a product?
Re:I don't see what the problem is. (Score:2)
This is just a straight transfer of data from one company's flag to another's, under the same policies and restrictions.
Stop being melodromatic about giving up all of our rights. I really cannot believe this topic is generating this amount of negative attention. I wish more companies were as open and pro-active about their customers' privacy. There isn't much more that Egghead could have done in this case, and it's silly to expect that they would just destroy their customer lists. How is Fry's to handle things like returns, warranties, catalogs, etc., if they don't have this information?
For the record, I had no problems (Score:2)
Let's see... (Score:1)
Sigh.
Re:Let's see... (Score:2)
Or you could just send them an e-mail (clearly you found the address) or call the provided 800 number. There are few things this company could do to make this process easier for you.
If you have a beef with Egghead as a company, that's your business, but they are doing everything they can to do the Right Thing here, and I applaud them for it, even if they've been the subject of misfortune in the past.
we're just done the same thing (Score:1)
we've bought their database (60,000 ppl)
I will be emailing them and telling them that their details are now ours and giving them the option to not get emailed by us again and a url for our ToC.
I might give them the option to have their db entry removed or I might not, I'm undecided but I'm paying good money for those details and the more entries we have the more likely someone will pay us to search it.
The worst that can happen is that person is offered a job so I don't feel guilty. I believe in our service. I would hope many businesses believe they are offering something to truly benefit the client.
opt-out... not (Score:1)
Nice enough for them to give you an opportunity to opt out. However...
You have to supply your username, which I don't have (I bought something from egghead about five years ago).
There is no mechanism for retrieving said username, as far as I can tell.
There is no one at Egghead responsible for replying to the annoyed emails sent by me and people like me.
So that's not really much of an opt-out, is it?
Re:opt-out... not (Score:2)
Except I'm still kind of confused as to why this is a privacy invasion.
How can company B handle company A's warranties, catalog preferences, refunds, replacements, pending orders, etc., if company B buys and/or merges with company A but company A destroys its own customer lists...?
I don't understand what company A (Egghead) could have or would have done differently in this case that would cease to make this a privacy problem.
It looks like it's just a simple transfer of customer data, kept under the same privacy policies that Egghead had. If you didn't like those privacy policies, why did you give them your information? Companies are bought out and merged all of the time. Do you really expect them to destroy their own customer records every time this happens?
The only reason we're seeing this issue now is because Egghead did the RIGHT THING by allowing their customers to opt out prior to the transfer. This is a very noble and privacy-friendly thing to do. It would be nice if every company did this as part of its data transfers.
The script didnt even work. (Score:2)
How convenient.
Bob
No more than 10% of customers may opt-out... (Score:1)
Fry's is the one everyone should be complaining about, not EggHead.
Re:No more than 10% of customers may opt-out... (Score:1)
Why, Beavis - er - Jeff - because you say it is?
These dopes figure because they didn't SAY they wouldn't, then they simply can.
This is about the same level as a five year old who says "but nobody told me I couldn't wash the sofa with a garden hose..."
I thought only Fry's deserved my derision - turns out Blockhead - er - Egghead gets the same treatment.
Banjaxed... (Score:1)
But what if... (Score:2)
Sometimes when I'm in Fry's I wished there was a "gold member" short line. (especially in returns)
What's really going on... (Score:2, Informative)
He mentioned that while Fry's had never had an online presence, it was time to develop one. And he felt the best way to do that was to purchase Egghead rather than building from scratch.
BTW, how do I know this? I was working for Fry's at the time and was able to catch this handy little tidbit...
But is Fry's competent enough to use it? (Score:1)
They have how many stores in silicon valley and how long did it take them to have a web presence? For the longest time any search for "Fry's Electronics" would just bring up pages flaming them. I seriously doubt that they have the know-how to make use of this data.
It needs to said... (Score:1, Redundant)
Cash (Score:1)
Cash... enjoy the retro.
Onsale has always been a bunch of slimeballs... (Score:2)
At that point, I vowed to never buy a thing from Onsale. I've done just fine without them (their prices usually weren't all that great anyway...ditto for Egghead), and it's somewhat comforting that their "bad karma" is about to catch up with them.
(eBay long ago fixed its system to make what Onsale did nearly impossible...you can still retrieve other users' email addresses, but you have to be logged in to do that, and I suspect that all address requests are logged. A bot trawling for addresses now would stick out like a sore thumb.)
pay good money for bad data... (Score:2)
on file offering an opt-out.
but, your email-on-file happened to have change
(is no longer valid). you don't get it, you
don't opt-out.
egghead goes ahead and sells that info to Fryes...
i wonder if Fryes has any idea of the *quality*
of info they are buying?
i kinda like this possibility
Most sell the information. (Score:2)
Why?
You don't have a de-facto right to control your information in the US, that's why. The database of information the company lawfully collected in their business dealings is THEIR asset to do what they want with (within the law, of course).
The individual records, they aren't that valuable. You don't 'own' all information about you in the world. The database as a whole has value.
As for them getting hacked, and losing their credit card info.. why do you feel so personally burned? The credit card belongs to the issuer, not you, and it's not YOUR problem if it's abused, it's the issuers. Yes, it may be slightly inconvenient to you to get it replaced.. though they informed you. Even though they said 'everything is okay', you can still call your credit card company up and request a new card because you suspect your current one has been compromised. They will send you a new one immediately at no charge.
I don't see what the big deal is.
Well. (Score:2)
And as I though...
I am liable for up to $50 of fraudulent charges if they are a result of my *card being stolen*, and I haven't reported it.
The language is quite explicitly clear. I am only liable if my card is physically stolen (lost, etc..).
The $50 limit you specify is a legal one; credit card issuers cannot produce, say, a cardholder agreemnet that makes you responsible for, say, $200 if the card is used incorrectly.. becauset the law says so.
If I were to post my card number to every BBS, the card company could hold me as being negligent; the cardholder agreement does discuss responsible use of the card. And responsible use includes letting them know when it's being used fraudulently.
Now.. maybe, just maybe, my cardholder agreement for my generic classic Visa from the Royal Bank of Canada is better than every other credit card agreement out there... but I doubt it.
I am only resonsible for (potentially) up to $50 in fraudulent charges resulting from the theft of my CARD.
proof (Score:1)
trolls can be funny. But trolls like this only sadden me that people can act this way.
Re:FRY's Electronics (Score:1)
Re:Why is this wrong? (Score:2)
My objection here is that many (most? all?) of these people did business with Egghead when it wasn't owned by Fry's. My personal information is not something I want bought and sold with company takeovers. Maybe I don't like Fry's, and maybe I don't want them to know anything about me.
The problem is that ultimately the information you divulge to a very select few companies of your choosing will become common knowledge to the marketing departments of _all_ companies. A buys B who reformulates it into D, and then branches off E to F, who is bought by G. Suddenly A, D, E, and G are the four major companies out there, and they ALL have YOUR information, just because you dealt with A at one point.