FTC Takes Action Against CafePress Over Massive Data Breach, Cover-Up By Orbit Brain June 27, 2022 0 235 views Residence › AuditsFTC Takes Motion In opposition to CafePress Over Large Information Breach, Cowl-UpBy Ionut Arghire on June 27, 2022TweetThe Federal Commerce Fee (FTC) on Friday introduced that it has finalized an order towards CafePress, requiring it to enhance its safety posture following a cybersecurity incident that the corporate tried to cowl up.CafePress is a web-based retailer of merchandise similar to T-shirts, baggage, calendars and mugs, which customers can customise with their very own graphics designs or texts. It additionally permits customers to have digital retailers on the platform.The FTC order was finalized roughly 4 months after a settlement over the poor cybersecurity practices employed by CafePress, which have led to delicate private info being compromised in an information breach.The breach got here to mild in 2019 and it reportedly impacted 23 million accounts. Regardless of repeated makes an attempt to get the corporate to take correct motion, CafePress not solely didn’t safe its methods, but additionally determined to not inform impacted clients about this and different cybersecurity incidents.A grievance was filed towards former CafePress proprietor Residual Pumpkin Entity, LLC, and towards the present proprietor, PlanetArt, LLC. The grievance claims that CafePress retained consumer knowledge longer than wanted, saved Social Safety numbers in plaintext, didn’t safe its methods towards recognized threats, and lined up the 2019 knowledge breach.On Friday, the FTC introduced that, per its finalized order, Residual Pumpkin and PlanetArt are required to enhance their safety practices by means of the adoption of multi-factor authentication, to reduce the quantity of collected knowledge, and to retailer Social Safety numbers encrypted.Per the FTC’s order, every of the 2 firms must implement a complete info safety program – “that protects the privateness, safety, confidentiality, and integrity of such Private Info” – inside 60 days after the issuance of the order.Moreover, each firms are required to have their info safety packages assessed by a third-party and to offer the FTC with a duplicate of the evaluation that may be publicly shared.Moreover, the FTC ordered Residual Pumpkin to pay $500,000 that can be despatched as aid to the victims of the information breach and requested PlanetArt to inform shoppers whose private info was compromised.The 2 firms are additionally required to offer the FTC with an annual certification from a senior company supervisor, detailing each their compliance with the order and an outline of any cyber incident that may have occurred in the course of the licensed interval. All incidents ought to be reported to the FTC inside 30 days.Associated: FTC: Patch Log4j Vulnerability to Keep away from Potential Authorized MotionAssociated: FTC Says Zoom Misled Customers on Its Safety for ConferencesAssociated: FTC Settles With Canadian Sensible Lock Maker Over Safety PracticesGet the Each day Briefing Most CurrentMost LearnLithuania Says Hit by Cyberattack, Russia ‘In all probability’ to BlameNIST Releases New macOS Safety Steerage for OrganizationsHome Passes ICS Cybersecurity Coaching InvoiceCerby Emerges From Stealth With Safety Platform for Unmanageable AppsFTC Takes Motion In opposition to CafePress Over Large Information Breach, Cowl-UpNetsec Goggle Customizes Courageous Search Outcomes to Present Solely Cybersecurity Web sitesCyberattack Forces Iran Metal Firm to Halt ManufacturingResearchers: Oracle Took 6 Months to Patch ‘Mega’ Vulnerability Affecting Many ProgramsCrowdStrike: Ransomware Actor Caught Exploiting Mitel VOIP Zero-DayBlack Basta Ransomware Turns into Main Risk in Two MonthsOn the lookout for Malware in All of the Mistaken Locations?First Step For The Web’s subsequent 25 years: Including Safety to the DNSTattle Story: What Your Pc Says About YouBe in a Place to Act By way of Cyber Situational ConsciousnessReport Reveals Closely Regulated Industries Letting Social Networking Apps Run Rampant2010, A Nice Yr To Be a Scammer.Do not Let DNS be Your Single Level of FailureHow one can Establish Malware in a BlinkDefining and Debating Cyber WarfareThe 5 A’s that Make Cybercrime so EnticingHow one can Defend In opposition to DDoS AssaultsSafety Budgets Not in Line with ThreatsAnycast – Three Causes Why Your DNS Community Ought to Use ItThe Evolution of the Prolonged Enterprise: Safety Methods for Ahead Pondering OrganizationsUtilizing DNS Throughout the Prolonged Enterprise: It’s Dangerous EnterpriseShare this:FacebookXPrintEmailLinkedInRedditTwitterTumblrPinterestTelegramWhatsApp CafePress cover up data breach FTC personal information social security number Orbit Brainhttps://orbitbrain.com/ Orbit Brain is the senior science writer and technology expert. Our aim provides the best information about technology and web development designing SEO graphics designing video animation tutorials and how to use software easy waysand much more. Like Best Service Latest Technology, Information Technology, Personal Tech Blogs, Technology Blog Topics, Technology Blogs For Students, Futurism Blog.
Apple Ships Urgent Security Patches for macOS, iOSIntroducing the Cyber Security News Apple Ships Urgent Security Patches for macOS, iOS.... July 20, 2022 Cyber Security News
Cisco Warns of Many Old Vulnerabilities Being Exploited in AttacksIntroducing the Cyber Security News Cisco Warns of Many Old Vulnerabilities Being Exploited in Attacks.... December 19, 2022 Cyber Security News
NSA Publishes Security Guidance for Organizations Transitioning to IPv6Introducing the Cyber Security News NSA Publishes Security Guidance for Organizations Transitioning to IPv6.... January 24, 2023 Cyber Security News
Checkmk Vulnerabilities Can Be Chained for Remote Code ExecutionIntroducing the Cyber Security News Checkmk Vulnerabilities Can Be Chained for Remote Code Execution.... November 3, 2022 Cyber Security News
Pwn2Own Offers $100,000 for Home Office Hacking ScenarioIntroducing the Cyber Security News Pwn2Own Offers $100,000 for Home Office Hacking Scenario.... August 30, 2022 Cyber Security News
Organizations Warned of New Lilith, RedAlert, 0mega RansomwareIntroducing the Cyber Security News Organizations Warned of New Lilith, RedAlert, 0mega Ransomware.... July 14, 2022 Cyber Security News
Ether.fi (ETHFI) Sell-Off Intensifies As Arrington XRP Capital Shifts Holdings To Binance, Will $3 Support Hold?March 20, 2024 72