Cadillac Fairview covertly uses facial recognition to monitor shoppers
Date: 2018-08
Affected: Mall visitors in Canada
Attack vector: data-exfiltration
Category: real-world
Severity: High

Canadian commercial real-estate company Cadillac Fairview secretly used facial recognition in mall directory kiosks to capture and analyze 5 million shoppers' faces without consent; the practice was exposed on Reddit and condemned by privacy commissioners.


Mitigations:

Architectural layers (MAESTRO):