Google always gets rap for its disregard for users' information security, but such oversight becomes more worrisome when it involves
financial data. Digital security firm ViaForensic recently concluded that Google failed to properly encrypt the data. The report stated that the quantity of unencrypted data stored by Google Wallet app exceeds, "what we believe most consumers find acceptable."
Publication of the report has brought about some positive changes as well. Google promptly changed the data storage protocol for the app. The report stated that the company stored a vast quantity of data on the handset itself. Though, it did not contain full credit card number, but the related information could lead to identity theft and other such attacks.
Google, however, pointed out that a rooted phone was used for the research purpose and the data was available on the rooted phones and hence un-tempered phones are safe. However, it is not the first time that Google hardware and software has been held guilty of sub-standard security measures. A recently released independent report had found that Android is getting more vulnerable to malware attacks.
ViaForensic also stated that there may be other hidden issues with Google Wallet app. It said, "This testing was really only very high level. Far more sophisticated and comprehensive security analysis is needed to determine if other vulnerabilities are present." The report also gave the clean chit to NFC technology and said that the app development companies should be responsible for ensuring the security of data.