Penalty against Mall Group

Penalty against Mall Group

The Mall Group is an Internet group and, according to its own information, the largest e-commerce group in the Central and Eastern European region. It was formed by the merger of various Eastern European companies in 2016. At the same time, the company does not act as a pure mail order company, but has additional channels for stronger customer loyalty through various other products such as MallPay, MallTV, etc. In the Czech Republic, Mall.cz is the market leader in e-commerce.

According to the Czech Data Protection Authority , unauthorized individuals were able to access the personal data of 735,000 customers between December 31, 2014 and August 2017. The records included first and last name, email address, password and phone number. The form of the passwords (hash or plaintext) was not disclosed. The data sets were also accessible for about a month at a Czech file hoster.

For more information, read our detailed blog post

Entscheidungsdatum:
03.10.2018

Land:
Czech Republic

Art des Verstoßes:
Theft of Data

Betroffene Datensätze:
735 000

Waren sensible Daten betroffen?:
No

verhängte Geldstrafe:
€ 60,000,-

Quelle:
Communication from the Czech Data Protection Authority (Czech)