United States of America: FTC investigation into CafePress over alleged failure to implement reasonable security measures to protect sensitive information stored on its network

Progress

Current status
in force
18 Sep 2024 in force
10 Jan 2024 under investigation
15 Mar 2022 under deliberation

Scope

Implementers
United States of America
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
platform intermediary: e-commerce
Government Branch
executive
Government Body
consumer protection authority
Implementation Level
national

Timeline of events

18 Sep 2024
in force

Issued ruling on claims process for consumers affected by CafePress's data security failures

On 18 September 2024, the Federal Trade Commission (FTC) announced that it was distributing over USD 370'000 in payments to consumers affected by data security lapses at the online merchandise platform CafePress. This follows a March 2022 settlement…

Source
Event type investigation
Action type ruling
Government branch executive
Government body consumer protection authority
10 Jan 2024
under investigation

Issued interim ruling on claims process for consumers affected by CafePress's data security failures

On 10 January 2024, the Federal Trade Commission (FTC) launched a claims process for consumers who had their Social Security numbers exposed in a data breach involving CafePress. This process stems from a settlement announced in March 2022, where Ca…

Source
Event type investigation
Action type interim ruling
Government branch executive
Government body consumer protection authority
15 Mar 2022
under deliberation

Announced investigation into CafePress over alleged failure to implement reasonable security measures to protect sensitive information stored on its network

On 15 March 2022, the Federal Trade Commission (FTC) announced an investigation into the online custom merchandise platform CafePress. The FTC alleges that CafePress failed to secure consumers' sensitive personal data and concealed a major breach. T…

Source
Event type investigation
Action type announcement
Government branch executive
Government body consumer protection authority