Penalty against mall group
The Mall Group is an internet company and claims to be the largest e-commerce group in Central and Eastern Europe. It was created by the merger of various Eastern European companies in 2016. The company does not act as a pure mail order company but has further channels for stronger customer loyalty through various other products such as MallPay, MallTV, etc. In the Czech Republic, Mall.cz is the market leader in e-commerce.
According to the Czech data protection authority, unauthorized persons were able to retrieve the personal data of 735,000 customers between 31 December 2014 and August 2017. The records contained first and last name, e-mail address, password and telephone number. The form in which the passwords existed (as a hash value or in plain text) was not disclosed. The records were also available for about a month at a Czech Filehoster.
Entscheidungsdatum:
03.10.2018
Land:
Czech Republic
Art des Verstoßes:
Theft of Data
Betroffene Datensätze:
735 000
Waren sensible Daten betroffen?:
No
verhängte Geldstrafe:
€ 60,000,-
Violation of GDPR Paragraph:
unknown
Quelle: