Credit card companies often strip your details from their records and then share it with third parties, claiming that it's anonymized. But a new study from MIT reveals that analysis of just four purchases made on your card can identify you with more than 90 percent accuracy, even when your details are removed.
The study used data from three months of credit card transaction made by 1.1 million people. The researchers analyzed the transactions by time and location to pin-point who might be making them, and found then used a small number of known purchase details to work out who, from the pool of over 1 million people, made them.
One result shows purchases being made in a bakery one day and a restaurant the other. The team found just one person that could have made the purchases, "and we now know all of his other transactions, such as the fact that he went shopping for shoes and groceries on 23 September, and how much he spent," they explain to Associated Press.
The team found that they only need four purchases to identify an individual on the anonymizied credit card records, or three purchases if the prices are known. The study also revealed that it's easier to identify women using the technique, though the researchers can't yet explain why.
The study goes to show that a sense of privacy though anonymized data is somewhat of an illusion. Even without any of our details to identify us, all it takes is careful use of metadata—in this case, our shop visits—to identify us completely. Gulp. [Science via AP]
Image by Shutterstock/Valerie Potapova