Fashion retailer Zoetop to pay $1.9M over data breach response
By 
Adrianne Appel2022-10-17T17:37:00
Zoetop, parent company to online clothing retailers SHEIN and ROMWE, agreed to pay $1.9 million as part of a settlement with the New York Attorney General’s Office for failing to properly protect customer information compromised during a 2018 data breach.
Zoetop did not properly protect customer data before or after the breach and “downplayed the extent” of the incident, New York Attorney General Letitia James said in an Oct. 12 press release.
Zoetop didn’t know where on its system it stored customer credit card information, James alleged. It allowed some credit card transaction information to be stored in plain text, she said, and used an algorithm to protect customer passwords that was known to be weak.
THIS IS MEMBERS-ONLY CONTENT
You are not logged in and do not have access to members-only content.
If you are already a registered user or a member, SIGN IN now.
Related articles
-
PremiumTop Ethics and Compliance Triumphs of 2025
This year’s compliance triumphs were all born out of compliance fails. In some cases, it was a regulator finding fault and demanding change. In others, acquiring companies noticed something a little fishy in their new acquisition. What formed a compliance triumph in every case wasn’t the mistake; it was the ...
-
ArticleWhat 2025’s AI mishaps should teach compliance in 2026
If 2025 was the year generative AI took off in organizations in every sector, it was also the year we saw increasing examples of the risks of AI mishaps.
-
OpinionBuilding resilient teams in cyberdefense
The stress on cyberdefense teams can be accurately described as a form of chronic occupational trauma stemming from several unique pressures. But there are ways to build a culture that combats these pressures.
More from Regulatory Enforcement
-
ArticleTariff evasion enforcement: The new FCPA
Companies that import goods into the United States will face heightened enforcement scrutiny for attempted acts of customs fraud, including tariff evasion, under the Trump administration. Thus, chief compliance officers and in-house counsel face a new kind of pressure to ensure they are mitigating risk in this area.
-
ArticleFormer COO of plastics importer faces up to five years for customs falsifications
The chief operating officer of a plastic resin importer has pleaded guilty to intentionally falsifying documents to avoid paying tariffs on goods from China, the Department of Justice (DOJ) announced.
-
ArticleCybercrime against banks and account holders takes hit from FBI
Federal investigators have announced progress in dismantling an online criminal operation that steals bank account information by mimicking legitimate bank websites.