Skip to content

Hanna Andersson controversies

Controversies tied to this brand in public sources. A listing is not a finding of fault.

Back to profile2 entries

  1. 2020

    Class action filed over Hanna Andersson customer data breach

    Lawsuit filed

    A class action complaint was filed against Salesforce and Hanna Andersson in connection with a customer data breach. The plaintiff, Bernadette Barnes, alleged negligence and violations of California's unfair competition law. According to the complaint, malware on Hanna Andersson's e-commerce platform scraped customer information, and the companies inadequately protected user information.

    Plaintiff Bernadette Barnes filed a class action complaint against Salesforce and Hanna Andersson, alleging negligence and violations of California's unfair competition law in connection with a customer data breach. The complaint alleged that malware on Hanna Andersson's e-commerce platform scraped customer information and that the companies inadequately protected user information.

    Source excerpt

    • Hanna Andersson’s investigation revealed that Salesforce Commerce Cloud’s e-commerce platform was infected with malware that scraped customer information.
    • Hanna Andersson notified customers about a data breach that occurred from September 16, 2019 to November 11, 2019.
  2. 2020

    Hanna Andersson agrees to $400,000 data-breach class-action settlement

    Settlement

    Hanna Andersson agreed to pay $400,000 and implement additional security measures as part of a class-action settlement arising from a breach in which hackers accessed customer personal information through a third-party e-commerce platform. The settlement was subject to a hearing scheduled for December 22, 2020.

    Company response

    • Remediation — Hanna Andersson

      As part of the Settlement, Hanna additionally committed to: Conduct a risk assessment of the Hanna data assets and environment consistent with the NIST Risk Management Framework; Enable multi-factor authentication for all cloud services accounts;

    Source excerpt

    • A video conference hearing in the case is scheduled for December 22, 2020.
    • Last month the high-end children’s clothing retailer Hanna Andersson agreed to pay $400,000 and implement new security measures as part of a class action settlement arising from litigation brought in the wake of a widespread data breach.
    • The lawsuit stems from a security incident where hackers accessed Hanna Andersson’s (“Hanna”) third-party e-commerce platform and gained access to customers’ personal information (“PII”).