You are currently viewing Zoetop Fined $1.9 Million for Data Breach

Zoetop Fined $1.9 Million for Data Breach

A $1.9 million fine was imposed on Zoetop, the parent company for the massive retailers Romwe and Shein, for failing to properly notify customers of a data breach that reportedly affected millions of users.

In 2018, 39 million Shein accounts’ login information was stolen after its parent business, Zoetop, was attacked by hackers.

Letitia James, the attorney general for New York, claimed that Zoetop had exaggerated the scope of the breach and had informed just a portion of the consumers who were impacted.

According to the office of the New York Attorney General, Zoetop failed to protect consumer data and failed to notify millions of account holders that their personal information had been compromised.

“To safeguard customers from fraud and identity theft, Shein and Romwe must tighten their cybersecurity protocols. This agreement should serve as a strong reminder to businesses that they need to improve their digital security protocols and communicate openly with customers, anything less won’t be accepted” Letitia James, the attorney general of New York, said.

More generally, according to Patrick Wragg, manager of cyber incident response at Integrity360, there are significant risks associated with a company failing to disclose that it has been attacked.

Letitia James alleged that Zoetop had exaggerated the scope of the hack, first claiming that only 6.42 million Shein accounts had been compromised. The majority of the 39 million impacted account holders were not informed, and all of those accounts did not require a forced password reset.

Romwe and Shein have grown to be well-liked online shopping venues for ‘Gen Z’ and millennial consumers looking for affordable, trendy fashion items.

Read the full article here

News Room

Cybervizer is a blog and podcast site that focuses on the latest technology and cybersecurity topics that are impacting enterprises, both small and large. Join us to explore the most important trends in enterprise technology and cybersecurity today. Get true insights into the tech and trends that will impact you and your organization.