Fashion retailer Love, Bonito says customer data potentially exposed in security incident

Following the incident, Love, Bonito said it had secured the affected systems, notified the relevant data protection authority and reported the matter to law enforcement. It is continuing to review its security measures.

Apologising to customers, Ms Song said the company has since strengthened its internal safeguards to prevent a similar issue from recurring.

“We are continuing to audit and review our security measures, and will make further improvements as needed to prevent an incident of this nature from happening again,” she said.

The retailer advised customers to remain vigilant against potential scams, warning that exposed personal details could be used to make phishing attempts appear more convincing.

Customers were urged to be cautious of unsolicited calls, emails or messages, and to never share one-time passwords or verification codes. They were also advised to monitor their payment card activity and report any unauthorised transactions promptly.

As an added precaution, the company suggested enabling two-factor authentication on payment cards and registering phone numbers with Singapore’s Do Not Call Registry to reduce unsolicited communications.

Love, Bonito said customers with queries can contact its support team via email.

Love, Bonito was fined S$24,000 (US$18,700) in 2022 after more than 5,000 customers’ personal data was accessed and stolen through malicious code on its e-commerce website.

CNA has asked Love, Bonito about how many customers were affected by the latest incident.

The Personal Data Protection Commission said it is investigating the incident.