Love Bonito

Summary

A fashion retailer experienced a data breach after malicious code was injected into its e-commerce platform, potentially compromising customers' personal and payment card information. The organization promptly removed the code, secured its systems, and initiated a forensic investigation with external security experts while notifying relevant authorities. A limited number of customers were affected, though the full scope remained under investigation. The company advised vigilance for unauthorized transactions and offered complimentary credit monitoring services to impacted individuals as a precautionary measure.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On December 10, 2019, Love Bonito discovered malicious code had been added to its e-commerce website, prompting an immediate investigation. The Singapore-based fashion retailer publicly disclosed the breach via customer emails on December 13, characterizing the incident as unauthorized access to personal and payment card information. Company representatives confirmed taking swift action to remove the malicious code and implement additional security measures across their systems. While the exact number of compromised accounts remained unspecified during initial reporting, Love Bonito stated only a "small number" of customers were impacted. The organization engaged external data security experts to conduct forensic analysis and coordinated with Singaporean authorities including the Personal Data Protection Commission and Police Force. No technical specifics regarding the code's functionality or intrusion methods were released during the active investigation.

The confirmed consequences involved potential exposure of customer credit card details and personally identifiable information. Love Bonito advised affected individuals to monitor financial accounts for unauthorized transactions, immediately report suspicious activity to their banks, and request card replacements if necessary. Customers were also instructed to enable two-factor authentication on payment cards as a protective measure. To address potential long-term risks, the company announced plans to provide complimentary credit monitoring services, though enrollment details remained pending at the time of disclosure. Internal response efforts focused on securing compromised systems while maintaining cooperation with law enforcement and regulatory bodies throughout the investigative process. No further updates regarding attacker attribution or detailed forensic findings were communicated in the immediate aftermath of the breach notification.

Sources

Sources available to members: 1 source.