Database Partial 500k Sample Leaked February 2019 Zip: Download Cafe Press

Tens of thousands of (last four digits and expiration dates). Legal and Regulatory Consequences

: The initial intrusion occurred on or before February 19, 2019 . While CafePress patched the vulnerability in March 2019, they did not fully investigate or notify customers until September 2019, after the leak was widely reported in the media. Tens of thousands of (last four digits and expiration dates)

Millions of unique , full names , physical addresses , and phone numbers . Passwords obscured using the outdated SHA-1 hash. Millions of unencrypted security questions and answers . Millions of unique , full names , physical

In February 2019, the custom-merchandise marketplace suffered a major data breach that exposed the personal information of approximately 23 million users . The breach gained public attention in August 2019 after a sample of the database surfaced on dark web forums and was indexed by breach notification services like Have I Been Pwned . Summary of the 2019 CafePress Leak In February 2019

The Federal Trade Commission (FTC) and several state Attorneys General took action against CafePress for failing to protect consumer data and attempting to cover up the incident by only requesting password resets without disclosing the breach. CafePress Data Breach - Have I Been Pwned

: Approximately 23,279,964 records were stolen. Data Compromised :