Hanna Andersson controversies
Controversies tied to this brand in public sources. A listing is not a finding of fault.
Back to profile2 entries
2020
Class action filed over Hanna Andersson customer data breach
Lawsuit filed
A class action complaint was filed against Salesforce and Hanna Andersson in connection with a customer data breach. The plaintiff, Bernadette Barnes, alleged negligence and violations of California's unfair competition law. According to the complaint, malware on Hanna Andersson's e-commerce platform scraped customer information, and the companies inadequately protected user information.
Plaintiff Bernadette Barnes filed a class action complaint against Salesforce and Hanna Andersson, alleging negligence and violations of California's unfair competition law in connection with a customer data breach. The complaint alleged that malware on Hanna Andersson's e-commerce platform scraped customer information and that the companies inadequately protected user information.
Source excerpt
Hanna Andersson’s investigation revealed that Salesforce Commerce Cloud’s e-commerce platform was infected with malware that scraped customer information.
Hanna Andersson notified customers about a data breach that occurred from September 16, 2019 to November 11, 2019.
2020
Hanna Andersson agrees to $400,000 data-breach class-action settlement
Settlement
Hanna Andersson agreed to pay $400,000 and implement additional security measures as part of a class-action settlement arising from a breach in which hackers accessed customer personal information through a third-party e-commerce platform. The settlement was subject to a hearing scheduled for December 22, 2020.
Company response
Remediation — Hanna Andersson
As part of the Settlement, Hanna additionally committed to: Conduct a risk assessment of the Hanna data assets and environment consistent with the NIST Risk Management Framework; Enable multi-factor authentication for all cloud services accounts;
Source excerpt
A video conference hearing in the case is scheduled for December 22, 2020.
Last month the high-end children’s clothing retailer Hanna Andersson agreed to pay $400,000 and implement new security measures as part of a class action settlement arising from litigation brought in the wake of a widespread data breach.
The lawsuit stems from a security incident where hackers accessed Hanna Andersson’s (“Hanna”) third-party e-commerce platform and gained access to customers’ personal information (“PII”).