Penalty against mall group
The Mall Group is an internet company and claims to be the largest e-commerce group in Central and Eastern Europe. It was created by the merger of various Eastern European companies in 2016. The company does not act as a pure mail order company but has further channels for stronger customer loyalty through various other products such as MallPay, MallTV, etc. In the Czech Republic, Mall.cz is the market leader in e-commerce.
According to the Czech data protection authority, unauthorized persons were able to retrieve the personal data of 735,000 customers between 31 December 2014 and August 2017. The records contained first and last name, e-mail address, password and telephone number. The form in which the passwords existed (as a hash value or in plain text) was not disclosed. The records were also available for about a month at a Czech Filehoster.
Decision data:
03.10.2018
Country:
Czech Republic
Type of Issue:
Theft of Data
Number of involved data records:
735 000
Special category of data involved:
No
Fine:
€ 60,000,-
Violation of GDPR Paragraph:
unknown
Reference: