Friday 14 October 2022 03:55 PM Shein parent company fined $1.9 MILLION by New York officials for 2018 data ... trends now
The parent company of the widely popular clothing brand Shein has been fined $1.9 million by New York state for failing to notify all 39 million users of a data breach in 2018 that compromised login credentials, allowing bad actors to steal credit card information.
The cyberattack on Shein, according to the Attorney General Office, included more than 375,000 New York residents, along with 800,000 more from the seven million Romwe accounts that were also infiltrated.
China-based Zoetop also falsely stated that only 6.42 million consumers had been impacted in the breach and failed to maintain reasonable security measures to protect customers' data, which led New York to seek retribution.
In addition to the misleading statements, Zoetop said that it 'ha[d] seen no evidence that [customer] credit card information was taken from our systems,' but two years later the firm found customer login information for Romwe on the dark web.
Shein's parent company, Zoetop, will pay a $1.9 million to New York state for failing to notify all 39 million users of a data breach in 2018
Attorney General Lelita James said in a statement: 'Shein and Romwe's weak digital security measures made it easy for hackers to shoplift consumers' personal data.
'While New Yorkers were shopping for the latest trends on Shein and Romwe, their personal data was stolen and Zoetop tried to cover it up.
'Failing to protect consumers' personal data and lying about it is not trendy.
'SHEIN and ROMWE must button up their cybersecurity measures to protect consumers from fraud and
