- Enforcing jurisdiction
- United Kingdom · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
Direct Clothing Co. (UK) Limited – Reprimand (United Kingdom, 2022)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Direct Clothing Co. (UK) Limited received a reprimand after a security breach allowed a third party to steal customer payment card details. This incident is important because it shows how vulnerabilities can lead to serious privacy violations. Companies must ensure their websites are secure to protect customer information.
What happened
Direct Clothing Co. was reprimanded for a security breach that exposed customer payment card information.
Who was affected
Customers who used Direct Clothing's website and had their payment details compromised were affected.
What the authority found
The Information Commissioner's Office reprimanded Direct Clothing Co. for failing to secure their website against unauthorized access.
Why this matters
This reprimand highlights the need for companies to prioritize website security and regularly check for vulnerabilities to protect customer data.
Source checks
Linked-source text retrieved.
Automated check recorded — 16 October 2026.
No issues were reported by that automated check.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
On 19 August 2021, Direct Clothing Co. (UK) Limited (DCCUK) were contacted by a customer who advised that their payment card had been defrauded after using DCCUK’s website. An investigation by DCCUK found that a malicious code had been introduced to the website which allowed an unknown third party to obtain the payment card details of website customers. The third party obtained access to DCCUK’s environment via a WordPress vulnerability, although the specific vulnerability could not be determined due to the number of vulnerabilities present at the time of the incident. DCCUK believed that a third party IT provider was responsible for the security and maintenance of the affected website, however, this was not the case.
Outcome
Reprimand
A formal reprimand: the DPA found a violation and issued a formal censure.
Related Enforcement Actions (0)
No other enforcement actions found for Direct Clothing Co. (UK) Limited in UK
This is the only recorded action for this entity in this jurisdiction.
Details
Decision Date
18 July 2022
Authority
Information Commissioner's Office
About this data
Cite as: Cookie Fines. Direct Clothing Co. (UK) Limited - United Kingdom (2022). Retrieved from cookiefines.eu
Last updated: