Penalty against Mall Group
The Mall Group is an Internet group and, according to its own information, the largest e-commerce group in the Central and Eastern European region. It was formed by the merger of various Eastern European companies in 2016. At the same time, the company does not act as a pure mail order company, but has additional channels for stronger customer loyalty through various other products such as MallPay, MallTV, etc. In the Czech Republic, Mall.cz is the market leader in e-commerce.
According to the Czech Data Protection Authority , unauthorized individuals were able to access the personal data of 735,000 customers between December 31, 2014 and August 2017. The records included first and last name, email address, password and phone number. The form of the passwords (hash or plaintext) was not disclosed. The data sets were also accessible for about a month at a Czech file hoster.
Art des Verstoßes:
Theft of Data
Waren sensible Daten betroffen?:
Violation of GDPR Paragraph: