A camera used for Google street view is pictured at the CeBIT computer fair in Hanover March 2, 2010.
SAN FRANCISCO (Reuters) - Google Inc said its fleet of cars responsible for photographing streets around the world have for several years accidentally collected personal information that consumers send over wireless networks.
Technology | Lifestyle | Media
The company said on Friday that it is currently in touch with regulators in several countries, including the United States, Germany, France, Brazil and Hong Kong, about how to dispose of the data, which Google said it never used.
"It's now clear that we have been mistakenly collecting samples of payload data from open (i.e. non-password-protected) WiFi networks," Google Senior VP of Engineering and Research Alan Eustace said in a post on Google's official blog on Friday.
Google, the world's largest Internet search engine, did not specify what kind of data it collected, but a security expert said that email content and passwords for many users, as well as general Web surfing activity, could easily have been caught in Google's dragnet.
"The bottom line is a lot of personal content is definitely available in open WiFi hotspots," said Steve Gibson, the president of Internet security services firm Gibson Research Corp.
He noted that most non-Web based email products, based on the POP and IMAP standards, do not encrypt log-in information or the messages people send. And he said that Google's own web email product, Gmail, has only in recent months encrypted the email messages that users send after their initial sign-on, which has been encrypted.
Google's Street View cars are well known for crisscrossing the globe and taking panoramic pictures of the city streets, which the company displays in its Maps product.
Collecting the WiFi data was unrelated to the Google Maps project, and was done instead so that Google could collect data on WiFi hotspots that can be used to provide separate location-based services.
Google said the collection of data was a simple mistake resulting from a piece of computer code that was accidentally included from an experimental project. Google said it became aware of the mistake in the past week, shortly after telling a German regulator that it was not collecting such information.
A Google spokesperson said the Street View cars have been collecting the information since 2006 in more than 30 countries.
"As soon as we became aware of this problem, we grounded our Street View cars and segregated the data on our network, which we then disconnected to make it inaccessible," Google's Eustace said, noting that Google had "failed badly" in maintaining its users trust.
(Reporting by Alexei Oreskovic, editing by Leslie Gevirtz and Bernard Orr)
A Google  car in Germany
Google revealed late yesterday that it had mistakenly collected information about Internet sites people had visited on public  networks.

The admission came from Google engineering head Alan Eustace in the form of a  post on Friday afternoon. In the statement, Google said that it had been unknowingly gathering the personal data for over three years through its  photo-mapping feature. The discovery was made during internal investigation resulting from earlier concerns by German regulators over the issue. Two weeks ago, Google told European officials that, while it did collect data from Wi-Fi services for location technologies, it did not save private user data. In yesterday's announcement, however, Google admitted that these claims were actually incorrect.

An estimated 600 gigabytes of personal data had apparently been collected because of a software error from 2006. Google Street View vehicles caught bits of information from unsecured or public Wi-Fi networks in both Europe and the United States, as well as around 30 other countries where Street View is used. Eustace said that Google has "never used that data in any Google products" and that it would stop the collection of Wi-Fi data altogether. He also said that Google was discussing with regulators about how to properly dispose of the data it had accumulated.

This incident is the latest in the Internet privacy debate, following 's move this week to update privacy and security settings for its users' accounts. European officials are expected to move on this issue, which has been controversial to both their citizens and governments for some time. Google had already agreed to take additional privacy measures in Germany last July after the nation's data protection agency raised concerns about Street View.

Hong Kong legislator, , said that Google may have violated Hong Kong's laws on 'interception of communications and surveillance', and was suspected of 'dishonest use of computers'.