Drizly data security to be monitored for 20 years under FTC order
By 
Adrianne Appel2023-01-11T20:38:00
Online alcohol retailer Drizly and its chief executive officer agreed to data security requirements and to be assessed by an independent monitor for up to 20 years as part of a final settlement with the Federal Trade Commission over a data breach that impacted 2.5 million consumers, the FTC announced Tuesday.
The FTC had proposed the measures and filed a complaint against Drizly in October, alleging the company and CEO James Cory Rellas knew about security vulnerabilities and ignored them.
Customer emails, addresses, phone numbers, and other data were unnecessarily stored by the company on an insecure platform with gaps that allowed hackers to gain access, the FTC alleged.
THIS IS MEMBERS-ONLY CONTENT
You are not logged in and do not have access to members-only content.
If you are already a registered user or a member, SIGN IN now.
Related articles
-
ArticleFTC places restrictions on CEO in Drizly enforcement proposal
The Federal Trade Commission announced a tentative settlement with online alcohol delivery platform Drizly and its chief executive officer regarding a data breach affecting 2.5 million consumers and the alleged lax security that allowed it to happen.
-
News BriefOFAC temporarily lifts sanctions on certain Russian oil shipments
The U.S. Treasury Department issued a new Russia-related general license allowing certain transactions tied to Russian oil shipments already en route to India. This move comes after oil prices spiked as the U.S war on Iran continues.
-
ArticleCompliance must future-proof AI projects to meet evolving regulations
AI implementations are surging, but many new systems are being abandoned after companies have invested in expensive projects. Now evolving AI regulation is adding to the list of reasons why new systems may fail. Compliance must watch emerging regulatory developments and ensure that any new AI tools are capable of ...
More from Regulatory Enforcement
-
ArticleU.K. competition regulator ‘very likely’ to use new enforcement powers despite government’s pro-growth agenda
New powers granted to the U.K.’s main competition watchdog will result in greater scrutiny, tougher enforcement, and a stark warning for companies to review their sales and marketing promotions—especially since some practices have been pushed firmly into the spotlight thanks to legislation that came into effect last year.
-
ArticleSEC enforcement priorities revert back to basics
Recent pronouncements made by the U.S. Securities and Exchange Commission leadership, alongside the recent overhaul of the SEC Enforcement Manual, collectively signal a back-to-basics enforcement approach that appears beneficial for companies in their dealings with the agency.
-
ArticleFCA drive to reduce its investigation costs likely to add to compliance burden for smaller firms, warn experts
The U.K. financial regulator’s move towards “impactful deterrence” could see smaller and mid-size firms come increasingly under the spotlight as the watchdog aims to tackle market-wide concerns instead of primarily focusing on large players capable of doing the most harm.