Penalty against mall group

Penalty against mall group

The Mall Group is an internet company and claims to be the largest e-commerce group in Central and Eastern Europe. It was created by the merger of various Eastern European companies in 2016. The company does not act as a pure mail order company but has further channels for stronger customer loyalty through various other products such as MallPay, MallTV, etc. In the Czech Republic, Mall.cz is the market leader in e-commerce.

According to the Czech data protection authority, unauthorized persons were able to retrieve the personal data of 735,000 customers between 31 December 2014 and August 2017. The records contained first and last name, e-mail address, password and telephone number. The form in which the passwords existed (as a hash value or in plain text) was not disclosed. The records were also available for about a month at a Czech Filehoster.

Decision data:
03.10.2018

Country:
Czech Republic

Type of Issue:
Theft of Data

Number of involved data records:
735 000

Special category of data involved:
No

Fine:
€ 60,000,-

Reference: