Residual Pumpkin Entity, the former owner of online retail platform CafePress, must pay $500,000 in redress under a proposed settlement with the Federal Trade Commission (FTC) announced Tuesday addressing allegations CafePress failed to secure consumers’ sensitive personal data and covered up a data breach.
The FTC alleged in its complaint CafePress failed to implement reasonable measures to protect customer data, storing Social Security numbers and security questions in clear, readable text and retaining data longer than necessary.
