Internal whistleblower disclosures triggered regulatory review after revealing that retail fashion aggregate Mosaic Brands (owner of Noni B) suffered a major customer loyalty database compromise due to systemic internal data protection failures.