appConfigEntityId

bodyType

customContents

entityId

entityUuid

isVideo

articlePageQuery

article

articleSchemaContent

content

hooksArticlePageAdvertisementConfigArticle

hooksArticlePageFloatingButtonConfigArticle

appConfig

filter

json

liveArticle

Singapore fashion retailer Love, Bonito said that some customers’ personal data may have been exposed after a security vulnerability on its website allowed unauthorised access to account information.
In an email to customers on Thursday, CEO Dione Song said the company identified the vulnerability on Sunday and resolved it on the same day.
Based on its investigations, the data that may have been affected includes customers’ names, dates of birth, email addresses, shipping addresses, phone numbers and order history details.
Partial payment information – such as card type, the last four digits of card numbers and expiry dates – may also have been affected for customers who used cards on the website.
However, full credit card details were not exposed, the company said. “This information is processed and held directly by our payment processor – we do not have access to or store this information ourselves,” Song added.

Following the incident, Love, Bonito said it had secured the affected systems, notified the relevant data protection authority and reported the matter to law enforcement. It is continuing to review its security measures.
Apologising to customers, Song said the company had since strengthened its internal safeguards to prevent a similar issue from recurring.
“We are continuing to audit and review our security measures, and will make further improvements as needed to prevent an incident of this nature from happening again,” she said.
The retailer advised customers to remain vigilant against potential scams, warning that exposed personal details could be used to make phishing attempts appear more convincing.
Customers were urged to be cautious of unsolicited calls, emails or messages, and to never share one-time passwords or verification codes. They were also advised to monitor their payment card activity and report any unauthorised transactions promptly.
As an added precaution, the company suggested enabling two-factor authentication on payment cards and registering phone numbers with Singapore’s Do Not Call Registry to reduce unsolicited communications.
Love, Bonito said customers with queries could contact its support team via email.
The company was fined S$24,000 (US$18,700) in 2022 after more than 5,000 customers’ personal data were accessed and stolen through malicious code on its e-commerce website.
CNA has asked Love, Bonito how many customers were affected by the latest incident. The Personal Data Protection Commission said it was investigating the incident.
This article was first published by CNA


North Korea at Japan’s Asian Games: sports diplomacy or propaganda stunt?

Health crisis grips Indonesians enduring haze: ‘my eyes sting, my head hurts’

China mulls bid for Apec free-trade area to taunt US, tantalise Asia

Kimi creator Moonshot draws global funds seeking ‘top-tier’ Chinese AI developers: sources

Singapore

Singapore retailer Love, Bonito warns customers of scam risks after data breach

A Love, Bonito store in Hong Kong’s New Town Plaza. Photo: Love, Bonito

Dione Song, CEO of Love, Bonito, says the company has strengthened security measures. Photo: Handout

Cambodia’s tourism slump leaves Angkor Wat eerily quiet

Restoration work is seen on a balustrade at the Angkor Wat temple complex in Siem Reap province, Cambodia, on July 20. Photo: ANA/Xinhua

Tourists jostle for a picture of the sunrise over the central stupa of Angkor Wat temple in 2018. Photo: Getty Images/AFP

Quieter times: restoration work is seen at the Angkor Wat temple complex in Siem Reap province, Cambodia, on July 20. Photo: ANA/Xinhua

Computer monitors are seen inside an alleged scam compound at the Thai-Cambodian border raided by Thai troops in March. Photo: Reuters

A road is seen winding through forest in Cambodia’s hilly eastern Mondulkiri province. Photo: AFP

Cambodian Prime Minister Hun Manet (centre) cuts the ribbon at the opening of a new road in Kampong Cham province earlier this month. Photo: Xinhua

An aerial view of Cambodia’s new Techo International Airport, near Phnom Penh, which began operations last year. Photo: AKP/EPA

Cambodia’s war on scammers needs a blueprint built to last

A compound near the Thai-Cambodian border Thailand’s military said was used for scam operations, pictured in March. Photo: Reuters

Debris and barbed wire in front of buildings inside a former scam compound in O’Smach, Cambodia, near Thailand’s Chong Chom area, in March. Photo: Reuters

Equipment confiscated in a raid by Cambodian police is laid out on a table at a scam centre in Phnom Penh, Cambodia, in March. Photo: AP

Detained scam centre suspects sleep at the Commissariat of Phnom Penh Municipal Police in Phnom Penh in March. Photo: AFP

Indonesia deports 92 Chinese nationals, issues lifetime entry bans in anti-scam crackdown

Indonesian Immigration officials escort detained Chinese nationals in November 2025 after they were arrested over allegedly running cyber scams.  Photo: EPA

Chinese nationals are detained after a raid on a shophouse in Batam on August 29, 2023. Photo: AP

Japan’s new AI police chief takes on US$2 billion scam epidemic

A screengrab of a social media video shows Osaka prefecture’s new virtual AI police chief “AIko”. Photo: YouTube/OsakaPrefecturalPolice

Japanese police officers stand guard in Tokyo on June 21 as football fans gather after the national team’s victory in a World Cup match. Photo: Reuters

A burnt-out car is seen next to the buildings of a former scam complex in Cambodia earlier this year. Photo: Kyodo

Japan’s Prime Minister Sanae Takaichi has instructed government employees to “demonstrate to the public the value of trustworthy AI”. Photo: Reuters

Hong Kong woman duped out of HK$1 million by fake AI investment app

Scammers have posed as investment experts and sent random messages offering unsolicited advice via WhatsApp. Photo: Edmond So

News

Asia

Southeast Asia

Partial payment information may also have been affected, but full credit card details were not exposed, the company says


Partial payment information may also have been affected, but full credit card details were not exposed, the company says.


Crime

Scams and swindles

E-commerce

Cybersecurity

Singapore retailer Love, Bonito warns customers of scam risks after data breach

.css-1c6uqr6{color:inherit;font-weight:inherit;font-size:inherit;font-family:inherit;line-height:inherit;overflow-wrap:break-word;}Partial payment information may also have been affected, but full credit card details were not exposed, the company says

Partial payment information may also have been affected, but full credit card details were not exposed, the company says