Data breach online fashion brand

[HattiesBackpack]

Sorry it’s not an AIBU, I’m posting here for traffic.

I recently had a delivery from a well known fashion brand, in with my own delivery note were 5 other customers sets of paperwork, details on these delivery notes includes customers name, full address, email address and payment information (partial card numbers).

I emailed the company asking what to do and their response has been poor at best. (They emailed me to say please can you dispose of the documents safely, no discussion of what they would do to make sure it wouldn’t happen again, and also they weren’t interested in whose information I had so they could contact them to let them know)

Now I don’t know what to do- I’m wondering if I should post these notes to the right people, or if I could report it to anyone, or if I should just forget all about it !

Any advice from anyone on this ?

Contact the ICO?

ico.org.uk/for-the-public/raising-concerns/

That’s perfect! Thanks

If you can afford the postage, post them on to the customers with a little note (you don't have to put any of your details in there)
Then at least they'll know what happened. Their orders obviously didn't have any paperwork with them, if they got them at all.
Most data breach concerns are around online security, so I doubt any official organisation would be too concerned about a paperwork error.