FTC Alleges Operators of Two Commercial Websites Failed to Protect Consumers’ Data

"FTC gives two companies [ClixSense, i-Dressup.com] a slap on the wrist after appalling hacks

No encryption. User data in plaintext. All user data stolen in a simple hack. No problem. The FTC doesn't care.

The US Federal Trade Commission has agreed to settle two legal cases against two companies that suffered catastrophic hacks in 2016.
Both got the equivalent of a slap on the wrist, despite having appalling security measures, not using any type of encryption, and storing data in plaintext, which, in turn, allowed hackers to steal millions of user records from each..."

https://www.zdnet.com/article/ftc-gives-two-companies-a-slap-on-the-wrist-after-appalling-hacks/

 

Yeah -- and these are the same guys that are supposed to be now protecting us from abusive ISP behaviors after Net Neutrality repeal.