FTC Finalizes $500K Order Against CafePress Data Breach

The former owner of e-commerce platform CafePress will pay $500,000 to settle allegations it failed to “secure consumers’ sensitive personal data and covered up a major breach” in 2019, the FTC said Friday, finalizing an order announced in March (see 2203150081). The commission voted 5-0 to finalize orders with Residual Pumpkin, the former owner of CafePress, and PlanetArt, which bought CafePress in 2020. The agreement requires PlanetArt to bolster its data security and requires the former owner to pay $500,000 to compensate small businesses affected by the breach.