The FTC’s finalized order also directs former CafePress owner Residual Pumpkin and current owner PlanetArt to bolster their cybersecurity procedures.
The trade regulator claimed that CafePress failed to properly investigate the breach or promptly inform affected customers.