Ashley Madison's $19 ‘Full Delete’ Option Made The Company Millions
while inexcusably vulnerable — made millions promising to “fully delete” accounts http://www.buzzfeed.com/...
Context & Ripple Effects
Ashley Madison monetized erasure: users paid $19 for a service marketed as fully deleting their accounts, and per the relationship data that product line generated millions in revenue. The breach turned that paid promise into the company's most damaging exhibit — customers who paid extra for discretion are exactly the people whose data is now public.
The arc since has only deepened the exposure: the hackers first released a 20GB archive of company emails and internal documents, then announced they were still holding another 300GB of employee emails and internal docs as leverage, and by September researchers had already cracked 11 million-plus of the site's supposedly bulletproof passwords.
First-order effects
- Customers who paid the $19 'Full Delete' fee learn their accounts survived anyway — the company's highest-trust revenue product is now evidence against it, with The Verge's coverage framing the fallout for users as potentially profound and the damage to Ashley Madison likely catastrophic.
Second-order effects
- With hackers retaining 300GB in reserve and Troy Hunt's mailbag showing affected users met with inadequate company support, Ashley Madison faces a support-and-remediation burden on top of reputational collapse — while any rival selling paid privacy or deletion must now prove those claims rather than merely assert them.
Third-order effects
- If the pattern holds, charging for deletion without verifiable delivery becomes a legal and regulatory liability rather than a revenue line: 'full delete' marketing invites fraud-style scrutiny once a breach demonstrates the data persisted.
The trend: Paid privacy promises are being repriced by breaches from marketing claims into enforceable obligations, with companies that monetize discretion bearing the downside when discretion fails.