Zoetop, owner of online fashion retailers SHEIN and ROMWE, will pay $1.9 million in penalties to the state of New York following a 2018 data breach that impacted more than 800,000 New Yorkers, state Attorney General Letitia James announced. Under the agreement, Zoetop will also strengthen cybersecurity measures, including hashing customer passwords and implementing network monitoring and incident response policies with timely investigations, consumer notice and password resets. James said the agreement “should send a clear warning” for companies to strengthen digital security measures and consumer transparency.