Retail News CRM

Tag: exposed

  • Love, Bonito Exposed: Singaporean Fashion Retailers Data Breach Puts Customer Information at Risk

    Love, Bonito Exposed: Singaporean Fashion Retailers Data Breach Puts Customer Information at Risk

    The Personal Data Protection Commission (PDPC) of Singapore is currently conducting an inquiry into a cybersecurity event involving fashion retailer Love, Bonito. The company revealed recently that a vulnerability on its website might have exposed some of its customers’ personal details.

    Love, Bonito discovered the security glitch on July 26 and promptly addressed the issue on the same day, upon uncovering unauthorized access to select customer account data. Following immediate actions to manage the incident, the retailer has also boosted its security measures to thwart similar incidents in the future.

    Customer Information at Risk

    According to Love, Bonito, the data that was potentially accessible includes customers’ names, birth dates, email and shipping addresses, as well as phone numbers. The company also acknowledged that customers who made card payments on their website might have had certain card information revealed. This includes the final four digits of their card number and the card’s expiration date. However, they were quick to reassure customers that full credit card details were not exposed in the incident.

    Love, Bonito did not divulge the number of customers impacted by the breach or provide any detailed description of the security vulnerability.

    The retailer has advised all affected customers to be on high alert for any possible phishing attempts, refrain from sharing one-time passwords or verification codes, and consistently monitor their accounts and payment cards for any suspicious activities.

    Questions & Answers

    What information was potentially accessed during the security breach?
    Customer names, birth dates, email and shipping addresses, and phone numbers might have been accessed. Limited card information may also have been exposed, including the last four digits of the card number and the expiration date.

    Did the security breach expose full credit card details?
    No, Love, Bonito has assured that full credit card details were not compromised during the incident.

    What measures has Love, Bonito taken following the incident?
    The company has taken immediate steps to contain the incident and has since strengthened its security safeguards to prevent future occurrences. They have also advised affected customers on measures to protect themselves.

  • Singapore Online Retailers Exposed: Dark Patterns Mislead Shoppers into Rushed Purchases

    Singapore Online Retailers Exposed: Dark Patterns Mislead Shoppers into Rushed Purchases

    In Singapore, three prominent online retailers, namely Boarding Gate, Origin Sleep, and Light In The Box, have been implicated in deceptive practices aimed at manipulating consumers’ purchasing behaviors.

    These retailers were found to be manipulating elements of their websites. They employed tactics often referred to as ‘dark patterns’, which included showcasing sham visitor counts, fraudulent countdown timers, and bogus discount claims. These tactics are used to generate an unnatural sense of urgency and product demand.

    Deceptive Tactics

    In the case of Boarding Gate, the company’s website was found to be displaying random figures that purportedly represented the number of viewers per product. This sly practice gives consumers the impression of high demand and real-time visitor activity, thereby pressuring them into making rapid purchasing decisions.

    Origin Sleep, also, resorted to similar manipulative strategies. The company’s website featured countdown timers suggesting that purchases had to be finalized before the given time ran out, even though these timers held no actual significance. Moreover, Origin Sleep was found to be conducting a supposedly limited-time sales offer. However, this “flash sale” was discovered to have continued for nearly two years under various pseudonyms.

    Light In The Box, on the other hand, displayed ‘Almost sold out’ notifications on items to suggest scarcity. In actuality, these labels were arbitrarily applied to create promotional effects. The company also provided misleading information about savings by comparing discounted prices with higher ‘original’ prices, which were never genuinely offered.

    Alvin Koh, the CEO of the Competition and Consumer Commission of Singapore (CCS), said that “dark patterns are insidious as they are difficult to detect and erode consumer trust in the digital marketplace.” He vowed that the CCS would continue to act firmly to safeguard consumer trust and honest businesses from those who engage in unfair competition.

    The three accused companies have since provided formal promises to the CCS. They have ceased their misleading actions and pledged to refrain from unjust trading practices in the future.

    Previous Violations

    In the previous year, Courts and Prism+, retailers of electronics and home appliances, were found to have contravened trading laws. They either charged consumers for products that were not selected or employed specific website features to create a false sense of urgency to purchase.

    Questions & Answers

    What are ‘dark patterns’?
    Dark patterns refer to manipulative techniques used on websites to influence consumers’ purchasing decisions.

    How have companies employed these ‘dark patterns’?
    Companies have used bogus visitor counts, fraudulent countdown timers, and false discount claims to generate an unnatural sense of urgency and product demand.

    What are the steps taken by the Competition and Consumer Commission of Singapore (CCS) to prevent such practices?
    The CCS has been proactive in detecting and combating such unethical practices. The implicated companies have been made to cease their deceptive tactics and have pledged to refrain from unfair trade practices in the future.

  • Spanish Retail Giant Mango Suffers Data Breach: Customer Marketing Data Compromised

    Spanish Retail Giant Mango Suffers Data Breach: Customer Marketing Data Compromised

    Mango, a global fashion retail corporation based in Spain, has recently announced a data breach. An external marketing service provider affiliated with the retailer experienced an unauthorized intrusion, compromising customer data.

    Details of the Data Breach

    On October 15, Mango informed its customers via email about the data breach incident. The breach compromised certain customer information used for marketing purposes. This included data such as first names, countries, postal codes, email addresses, and phone numbers.

    The company was quick to reassure customers that the breach did not involve financial information, passwords, or other identification details.

    Mango’s Response to the Breach

    Mango emphasized the continued security of its infrastructure and internal corporate systems. It also confirmed that the company’s operations are continuing uninterrupted.

    Upon learning about the breach, Mango immediately implemented all its security protocols. The company has also reported the issue to the Data Protection Agency and the Authorities, in accordance with current regulations and their internal protocol.

    As a precaution, Mango sent out a notice to its customers about the breach. It advised customers to be vigilant for suspicious emails or phone calls asking for personal information or prompting them to take unusual actions.

    Contacting Mango

    Clients who have any concerns about the breach can reach Mango’s customer service at personaldata@mango.com. Alternatively, they can make a direct phone call to +34 93 860 24 24.

    In closing, Mango expressed regret for the incident. The company conveyed their sincere apologies for any inconvenience caused by the situation.

    Questions & Answers

    What kind of customer data did the breach compromise?
    The breach compromised data used for marketing purposes, including customers’ first names, countries, postal codes, email addresses, and phone numbers.

    Did the breach involve any financial or identification information?
    No, the breach did not involve any financial information, passwords, or other identification details.

    What steps has Mango taken in response to the breach?
    Mango has implemented all its security protocols and reported the issue to the Data Protection Agency and the Authorities. The company has also advised customers to be alert for suspicious emails or phone calls.

  • Client data exposed in Gucci, Balenciaga and McQueen cyberattack

    Client data exposed in Gucci, Balenciaga and McQueen cyberattack

    Luxury brands Gucci, Balenciaga, and Alexander McQueen have fallen victim to a cyber attack, leading to the potential theft of millions of customer’s private details. The assault targeted Kering, the French corporation that owns these prestigious labels.

    Kering recognized and confirmed the breach but did not publicly name the brands impacted. In a statement made in June, they reported that “an unauthorized third party momentarily gained access to our systems and accessed limited customer data from some of our Houses”.

    This incident is not an isolated event but seems to be part of a broader trend impacting luxury brands and retailers throughout the year. Other brands that suffered similar breaches include Cartier, owned by Richemont, and labels under LVMH. In July, a data leak affecting approximately 419,000 customers at LVMH’s Louis Vuitton was being investigated by Hong Kong’s privacy watchdog.

    The stolen customer data reportedly includes names, email addresses, phone numbers, addresses, and the total amounts spent at the brands’ stores. Notably, Kering has reassured that no financial information, such as credit card or bank account numbers, was stolen during the attack.

    The hackers, referring to themselves as “Shiny Hunters,” allege to have data associated with 7.4 million unique email addresses.

    In response to the breach, Kering stated that its brands promptly reported the incident to the relevant authorities and notified customers in accordance with local regulations. However, Kering did not provide a response when questioned about the countries impacted by the cyber attack.

    Questions & Answers

    What brands were affected by the cyber attack?
    The affected brands include luxury labels Gucci, Balenciaga, and Alexander McQueen, all owned by French parent company Kering.

    What kind of customer information was stolen during the breach?
    Reportedly, the stolen client data includes names, email addresses, phone numbers, addresses and the total amounts spent at the brands’ stores. However, no financial information like credit card or bank account numbers were compromised.

    How did Kering respond to the cyber attack?
    Kering reported that its brands immediately disclosed the breach to relevant authorities and notified customers as per local regulations. However, they did not comment on the specific countries affected by the attack.