Overview
- Love, Bonito identified a website security vulnerability on July 26 and says it resolved the issue the same day before emailing affected customers on July 30.
- The company says the data that may have been exposed includes names, dates of birth, email and shipping addresses, phone numbers, order history, and partial payment details such as card type, last four digits and expiry dates.
- Love, Bonito stressed that full credit card numbers were not exposed because full card data is processed and stored by a third-party payment processor not under the company’s control.
- The retailer has notified the Personal Data Protection Commission and reported the matter to law enforcement while it audits and strengthens its security safeguards.
- The incident raises phishing and identity-theft risks for customers and draws sharper regulatory attention because Love, Bonito was fined S$24,000 after a 2019 breach that affected thousands of users.