Singapore-based fashion retailer Love Bonito said on July 30 that a website security vulnerability it identified and fixed on July 26 may have allowed unauthorized access to some customers’ account information.

The exposed information may have included names, dates of birth, email addresses, shipping addresses, phone numbers, order history details, and partial card information.

The company did not disclose how many customers were affected. CEO Dione Song said all affected customers in Singapore were informed.

Love Bonito said full credit card details were not exposed because its payment processor processes and stores that information.

Singapore’s Personal Data Protection Commission is investigating the incident after the retailer said it had notified the data protection authority and law enforcement.

The retailer was fined S$24,000 (US$19,000) in 2022 over a separate breach involving more than 5,000 customers.

🔗 Source: CNA

Recent Love, Bonito developments