The Federal Trade Commission (FTC) issued a press release on March 15, 2022, stating that it was taking action against CafePress “over allegations that it failed to secure consumers’ sensitive personal data and covered up a major breach” by filing a complaint against Residual Pumpkin Entity, LLC formerly d/b/a/ CafePress and PlanetArt, LLC d/b/a CafePress.
The proposed order and decision would settle the FTC’s complaint against CafePress, which alleged that the respondents “hosted a platform at the website www.cafepress.com, through which consumers nationwide and internationally can purchase customized merchandise,” and “collected sensitive information from users through its website.” According to the complaint, the information was stored on CafePress’ network in clear text, was not reasonably secured, and was compromised by a hacker.
The FTC alleged that CafePress violated the privacy policy on its website and in other communications to consumers when it stated that it uses safeguards to protect personal information, including “the best and most accepted methods and technologies” and “safe and secure Shopping. Guaranteed.”
According to the complaint, respondents “failed to provide reasonable security for the Personal Information stored on its network,” by:
storing Social Security numbers and security questions and answers in clear, readable text;
failing to use reasonable measures to protect passwords;
failing to have a process in place to address security...
NEW HAVEN — A New Haven man pleaded guilty Friday to making false claims to the IRS after he was accused of fraudulently obtaining nearly $257,000 in COVID-19 relief funds, federal prosecutors sai...