The US Federal Trade Commission (FTC) has ordered CafePress t-shirt and merchandise site former owner to pay a USD 500,000 fine for a data breach it suffered in 2018, but which it also covered up, that impacted more than 23 million customers. The FTC found out that CAfe Press failed to protect their personal data, and to adopt adequate cybersecurity measures and incident response procedures. CAfe Press was also ordered to alert the customers whose personal info was violated and provide them with information on how they can protect themselves. A series of other procedures was finally imposed on CAfe Press, which can be read in the order here.
