Live data from Hacker News

FTC Takes action against Drizly and CEO following security breaches

ftc.gov

1–10 of 23 posts

Re: FTC Takes action against Drizly and CEO following security breaches

#7
I am genuinely curious: why did the FTC take this enforcement action?

There is no fine, no prosecution, no consequences of any sort. Essentially, they're just asking the executive to "implement an information security program" at any companies they head.

This seems to send the message that there are absolutely no consequences for getting caught hiding an extremely negligent data breach. Was that the FTC's intent?

Re: FTC Takes action against Drizly and CEO following security breaches

#8

I did not know that Drizly was an Uber subsidiary. I wonder how much of the "disregard for authority" DNA of Uber got on them?

Based on this it seems the leaves don’t fall to far from the tree

They turned out to be a real shit-apple, Randy.

Re: FTC Takes action against Drizly and CEO following security breaches

#9

I am genuinely curious: why did the FTC take this enforcement action? There is no fine, no prosecution, no consequences of any sort. Essentially, they're just asking the executive to "implement an information security program" at any companies they head. This seems to send the message that there are absolutely no consequences for getting caught hiding an extremely negligent data breach. Was that the FTC's intent?

Since last year's AMG case in the Supreme Court, the FTC is not authorized to seek monetary relief in these cases.

The FTC can seek monetary relief if this order is violated.

Re: FTC Takes action against Drizly and CEO following security breaches

#10

I am genuinely curious: why did the FTC take this enforcement action? There is no fine, no prosecution, no consequences of any sort. Essentially, they're just asking the executive to "implement an information security program" at any companies they head. This seems to send the message that there are absolutely no consequences for getting caught hiding an extremely negligent data breach. Was that the FTC's intent?

FTC isn't the DOJ. They can't prosecute anything.
Post reply on HN