Polish data protection authority issues €645,000 fine to online retailer

guest · Sep 26, 2019

Polish data protection authority issues €645,000 fine to online retailer
September 26, 2019
https://www.itgovernance.eu/blog/en/polish-dpo-issues-fine-to-online-retailer-for-data-breach

Poland’s Personal Data Protection Office (UODO) this week imposed a PLN 2.8 million (€645,000) fine on online retailer Morele.net for “insufficient organisational and technical safeguards”.
The data breach affected approximately 2.2 million customers who purchased products through one of the group’s nine websites.
THE EXTENT OF THE DATA BREACH
The leaked data included names, telephone numbers, email addresses and delivery addresses. 35,000 customers had additional information leaked, including their payment instalment information (including Personal ID number), education, source of income and net income, household maintenance costs and marital status.
SCAM SMS MESSAGES SENT TO CUSTOMERS
Morele.net was made aware of the scam in November 2018 when customers reported receiving SMS messages informing them that they needed to make an extra payment of PLN 1 to complete the order. The message contained a link to a fake Dotpay electronic payment gateway.
Click to expand...

THE PENALTY IMPOSED BY UODO
The President of UODO stated that Morele.net, “by not using sufficient technical means of data protection, violated, among others specified in art. 5 paragraph 1 letter f GDPR, the principle of confidentiality. As a result, unauthorized access to and access to customer data occurred. The authority considered that an ineffective means of authenticating access to data had been used.
Click to expand...

Fine for insufficient organisational and technical safeguards

Log in or Sign up

Polish data protection authority issues €645,000 fine to online retailer

guest Guest

Log in or Sign up

Polish data protection authority issues €645,000 fine to online retailer

guest Guest

Useful Searches