Guess is an international accessory and clothing vendor. 

​

The FTC complaint alleged that they engaged in deceptive acts or practices because, despite claiming that they had implemented reasonable and appropriate measures to protect consumers' personal information on their website Guess.com from alteration, misues, or loss, their application and website were vulnerable to commonly known attacks, such as Standard Query Language (SQL) attacks, leading to an attacker using an SQL injection attack to access users' credit card numbers stored in Guess's database in clear text.