Security News > 2021 > March > Clothes retailer Fatface: Someone's broken in and accessed your personal data, including partial card payment details... Don't tell anyone

British clothes retailer Fatface has infuriated some customers by telling them "An unauthorised third party" gained access to systems holding their data earlier this year, and then asking them to keep news of the blunder to themselves.

Several people wrote into The Register to let us know about the personal data leak, with reader Terry saying: "You will notice the Fatface email is marked as confidential. This annoyed me."

We also asked about the extent of the breach as well as its decision to ask customers whose data had potentially been accessed to keep their mouths shut about it.

Ironically, Fatface itself also noted in the financial results document that any "Failure to react appropriately in the event of breach... could result in financial penalties or reputational damage."

"It's not something I have seen before, and it's unlikely to enamour Fatface to those whose information has been - or may have been - compromised."

"UK data watchdog the Information Commissioner's Office told The Register:"People have the right to expect that organisations will handle their personal information securely and responsibly.

News URL

https://go.theregister.com/feed/www.theregister.com/2021/03/24/fatface/