Singapore’s Personal Data Protection Commission (PDPC) is investigating a cybersecurity incident involving fashion retailer Love, Bonito after the company disclosed that some customers’ personal information may have been exposed through a vulnerability on its website.

According to The Straits Times, Love, Bonito identified the security flaw on July 26 and said it fixed the issue on the same day after detecting unauthorised access to certain customer account information. 

The company informed affected customers in an email sent on July 30, stating that it had taken immediate steps to contain the incident and has since strengthened its security safeguards to prevent a recurrence.

The retailer said the information that may have been accessed includes customers’ names, dates of birth, e-mail addresses, shipping addresses and phone numbers.

Customers who made purchases using payment cards on the Love, Bonito website may also have had limited card information exposed, including the last four digits of their card number and the card’s expiry date. However, the company said full credit card details were not compromised.

Love, Bonito did not disclose the number of customers affected or provide technical details about the vulnerability. 

The company has urged affected customers to stay vigilant against phishing attempts, avoid sharing one-time passwords or verification codes, and monitor their accounts and payment cards for any suspicious activity.

• Further reading: Love, Bonito unveils new brand identity, revamped assortment strategy.