🔥 Trending Love, Bonito Security Vulnerability: What You Need to Know

On July 26, 2024, Singapore-based fashion retailer Love, Bonito identified a security vulnerability on its website that led to unauthorized access to some customer data ²⁴⁵. The company disclosed the data breach on July 30, 2024, and began notifying affected customers via email ³⁵.

Details of the Vulnerability and Data Exposed

The security flaw allowed unauthorized parties to access various pieces of customer information ³⁴. According to Love, Bonito, the exposed data may include:

• Customer Names ²⁴⁶
• Contact Details: Phone numbers and email addresses ²⁶⁸
• Birthdates ⁴⁸
• Addresses ⁸
• Partial Payment Card Details: While full payment card numbers were not exposed, partial details were, which could still pose a risk ²⁴⁶⁸.
• Order History ⁸

Love, Bonito stated that the vulnerability was promptly patched after its discovery ²⁴. The company has also notified Singaporean authorities about the incident and is conducting an audit of its security measures ².

Previous Security Incidents

This is not the first time Love, Bonito has faced security issues. In 2024, the company was fined S$24,000 for a data breach that occurred in 2019 ¹. This earlier incident involved the exposure of different types of customer data.

Recommendations for Affected Customers

Following the recent breach, Love, Bonito has advised customers to be vigilant against potential scam risks ⁷. While the company has secured the vulnerability, customers whose data may have been compromised should:

• Monitor Financial Statements: Keep an eye on bank and credit card statements for any suspicious activity.
• Be Wary of Phishing Attempts: Exercise caution with unsolicited emails, messages, or calls asking for personal or financial information. Fraudsters might use the exposed data to craft more convincing phishing attempts.
• Change Passwords: Consider changing passwords for their Love, Bonito accounts and any other accounts where they might have used the same password.