Singapore-founded fashion brand Love, Bonito warns customers after website breach exposes personal data. The incident is also under investigation by Singapore's Personal Data Protection Commission. SINGAPORE, July 31 - Fashion retailer Love, Bonito said some customers' personal data may have been exposed after a security vulnerability on its website allowed unauthorised access to account information. The regional womenswear brand said it identified and fixed the vulnerability on July 26, and has since launched investigations into the incident, Singapore-based news outlet CNA reported today. "We are continuing to audit and review our security measures, and will make further improvements as needed to prevent an incident of this nature from happening again," chief executive officer Dione Song was quoted as saying in an email to customers. The Singapore-founded company said the potentially affected information includes customers' names, dates of birth, email addresses, shipping addresses,... Third-Party Content Disclaimer Content displayed on this platform may include news articles, reports, and other materials aggregated from publicly available third-party sources through automated tools. Such content is not created, written, commissioned, or edited by Straits Interactive Pte Ltd or the Data Protection Excellence (DPEX) Network. While DPEX Network take reasonable steps to ensure responsible publication, DPEX Network do not independently verify all third-party information and make no representations as to its accuracy, completeness, or reliability. The views, findings, and statements expressed in third-party content belong solely to the original source and do not reflect the views of Straits Interactive Pte Ltd or the DPEX Network. If you believe any content is inaccurate, infringing, or should be removed, please contact DPEX Network at [email protected]. DPEX Network will review the matter and, where appropriate, take action in accordance with its internal policies.

Fashion retailer Love, Bonito says customer data potentially exposed in security incident. The fashion retailer says names, contact details and partial payment information may have been exposed. New: You can now listen to articles. 31 Jul 2026 10:13AM (Updated: 31 Jul 2026 10:15AM) Add CNA as a trusted source to help Google better understand and surface our content in search results. Read a summary of this article on FAST. SINGAPORE: Fashion retailer Love, Bonito said that some customers' personal data may have been exposed after a security vulnerability on its website allowed unauthorised access to account information. In an email to customers on Thursday (Jul 30), CEO Dione Song said the company identified the vulnerability on Jul 26 and resolved it on the same day. Based on its investigations, the data that may have been affected includes customers' names, dates of birth, email addresses, shipping addresses, phone numbers and order history details. Partial payment information - such as card type, the last four digits of card numbers and expiry dates - may also have been affected for customers who used cards on the website. However, full credit card details were not exposed, the company said. "This information is processed and held directly by our payment processor - we do not have access to or store this information ourselves," Ms Song added. Following the incident, Love, Bonito said it had secured the affected systems, notified the relevant data protection authority and reported the matter to law enforcement. It is continuing to review its security measures. Apologising to customers, Ms Song said the company has since strengthened its internal safeguards to prevent a similar issue from recurring. "We are continuing to audit and review our security measures, and will make further improvements as needed to prevent an incident of this nature from happening again," she said. The retailer advised customers to remain vigilant against potential scams, warning that exposed personal details could be used to make phishing attempts appear more convincing. Customers were urged to be cautious of unsolicited calls, emails or messages, and to never share one-time passwords or verification codes. They were also advised to monitor their payment card activity and report any unauthorised transactions promptly. As an added precaution, the company suggested enabling two-factor authentication on payment cards and registering phone numbers with Singapore's Do Not Call Registry to reduce unsolicited communications. Love, Bonito said customers with queries can contact its support team via email. Love, Bonito was fined S$24,000 (US$18,700) in 2022 after more than 5,000 customers' personal data was accessed and stolen through malicious code on its e-commerce website. CNA has asked Love, Bonito about how many customers were affected by the latest incident. The Personal Data Protection Commission said it is investigating the incident. Related topics.