Ecommerce Enablers, the operator of ShopBack, has been penalized about US$54,700 for failing to protect users’ personal data.

This has resulted in a breach where close to 1.5 million emails, over 840,000 names, and other sensitive information were stolen and later sold online. The breach occurred due to a security key inadvertently leaked by a company senior software engineer.