LIVE · cybersecurity feed
Live wire
security

Retail theft bill spurs ‘very large and very dangerous’ surveillance fears

A bill aimed at combating organized retail theft has passed the House of Representatives with significant bipartisan support, but it faces opposition from civil liberties groups who warn it could lead to an expansive and dangerous surveillance network centered within Immigration and Customs Enforcement (ICE). The Combating Organized Retail Crime Act (CORCA) passed the House in June by a vote…

ZeroDay News ·

Source: CyberScoop

A bill aimed at combating organized retail theft has passed the House of Representatives with significant bipartisan support, but it faces opposition from civil liberties groups who warn it could lead to an expansive and dangerous surveillance network centered within Immigration and Customs Enforcement (ICE). The Combating Organized Retail Crime Act (CORCA) passed the House in June by a vote of 348-60, and its supporters are now pushing for its inclusion in the annual defense policy bill, a piece of legislation considered essential for passage.

At its core, CORCA proposes the establishment of an Organized Retail and Supply Chain Crime Coordination Center within ICE’s Homeland Security Investigations (HSI) division. The bill also seeks to create new criminal penalties for money laundering proceeds from the sale of stolen goods and sets a $5,000 threshold for the combined value of stolen property over a year for charging purposes.

Opponents of the bill argue that its broad and vague language, particularly regarding definitions of "organized retail crime" and "retailers," could enable extensive data sharing between government entities and retailers. They express concern that the bill would grant the Department of Homeland Security (DHS) access to retail surveillance data, including information from security cameras in public spaces like malls and train stations, as well as automated license plate readers. Critics contend that this framework would allow the government to obtain such data freely, bypassing existing practices where agencies might purchase data from brokers.

Civil liberties and civil rights organizations, including the American Civil Liberties Union (ACLU) and the NAACP Legal Defense and Education Fund, are actively working to defeat CORCA. A primary concern for these groups is the proposed fusion center within ICE, an agency that has been scrutinized for its data collection practices, including cell phone location and health information. They argue that adding retail data to this existing pool would exacerbate concerns about ICE's ability to track individuals and their associates, particularly given allegations of racial profiling.

Supporters of CORCA, however, maintain that the bill is narrowly focused on organized retail crime leaders and poses no risk to ordinary citizens. They emphasize that organized retail crime has evolved into a multi-jurisdictional threat with significant economic and national security implications. They also clarify that the bill does not grant DHS new enforcement authorities, but rather leverages HSI's existing role in addressing transnational and organized criminal activity.

The American Trucking Associations supports the bill, with its legislative director dismissing surveillance concerns as unfounded. They argue that the bill primarily creates a central repository within HSI for industry to report high-level crimes committed by large organized theft groups, rather than expanding government surveillance powers.

Retail industry representatives also highlight the distinction between ICE's HSI, which focuses on criminal investigations including cybercrime, and its Enforcement and Removal Operations division, which handles immigration enforcement. They point to a substantial increase in cyber-enabled retail crime, such as gift card fraud, e-commerce fraud stemming from phishing or account takeovers, and cargo theft facilitated by false personas. They argue that CORCA could provide a crucial tool to address the convergence of cyber and physical theft methods.

Both proponents and opponents of the bill remain optimistic about their respective efforts. While some lawmakers who initially sponsored the legislation ultimately voted against it, suggesting a growing understanding of its potential implications, supporters point to the wide House vote and bipartisan backing from key committee leaders as evidence of strong momentum. Opponents, however, emphasize the need to further educate legislators about the extensive power that could be granted to ICE and the potential for a lack of accountability within DHS.

ShareXLinkedInWhatsAppFacebook

More News

view all →
security

Canadian cybersecurity executive arrested in federal extortion case

A Canadian cybersecurity executive was arrested in Pennsylvania on Thursday, facing federal charges of conspiracy to commit extortion. Edward Dubrovsky, 54, a co-founder and former Chief Operating Officer of CYPFER, a firm specializing in ransomware negotiation, is charged with conspiring to threaten the confidentiality of information for extortion and conspiring to commit Hobbs Act extortion,…

breach

Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management

AI SPERA, the company behind the cyber threat intelligence platform Criminal IP, has announced AITEM (AI-Powered Threat Exposure Management), an expansion of its Attack Surface Management (ASM) offerings. AITEM aims to move beyond traditional asset discovery to provide a more comprehensive approach to understanding, prioritizing, and responding to security exposures. The platform is scheduled…

ai

AI Is Getting Really Good at Messing With Cybercriminals

Anti-cybercrime initiatives are increasingly deploying artificial intelligence to disrupt scammers by engaging them with lifelike bots, which the criminals mistake for genuine victims. This strategy aims to waste scammers' time and resources while gathering intelligence on their operations.

ransomware

FBI Arrests Ransomware Negotiation Firm Co-Founder in ShinyHunters Probe

The Federal Bureau of Investigation (FBI) has reportedly arrested Edward Dubrovsky, a co-founder of the ransomware negotiation firm Cypfer and currently associated with CyberSteward. The arrest is said to be part of the ongoing ShinyHunters investigation, specifically in connection with an incident involving FBI job applicant data.

ai

The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't

A new report highlights a significant blind spot in enterprise security architectures concerning the proliferation of third-party AI agents. The forthcoming 2026 State of Agent Security Report indicates that current security models, often designed to protect AI systems directly chosen and deployed by an organization, frequently fail to account for AI capabilities embedded within third-party…

security

Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison

A former core infrastructure engineer has been sentenced to prison for an attempted cyber extortion plot against an industrial firm. The engineer reportedly deleted administrative accounts and reset hundreds of user passwords, subsequently demanding a ransom of 20 Bitcoin to prevent further disruption to the company's servers.