No Cinderella Story for Shoe Retailer Office

Shoe retailer, Office, have been warned to up its Security game by the Information Commissioners Office (ICO).

May 2014, saw Office have a untidy data breach which exposed more than one million customer details. This included personal data, however (luckily) no financial data was compromised. Office have said they have now rectified the issues.

So how did it happen? The ICO was informed that a member of the public had hacked into an unencrypted historical Office database that was being stored on a server outside the core infrastructure of the retailer's current website.

From there, the individual gained access to the personal data of more than one million office customers, including contact details and website passwords.

But it highlights the question where do retailers store their data and why? How long should it be stored? 

Data Breach