Threat Intelligence Brief
Curated summary with source attribution
Source: insideretail.asia
Threat Risk: Medium
Victim: Love, Bonito customers
Incident: Unauthorized access to customer account data via a website vulnerability.
Impact: Exposure of personal identifiable information (PII) and partial payment card details.
Attacker: Unidentified threat actors
Analysis: The breach resulted from a website vulnerability that allowed unauthorized actors to access customer account information. While full credit card numbers were not compromised, the exposure of names, phone numbers, and partial payment data significantly increases the risk of social engineering. The company patched the flaw the same day it was discovered, though the total number of affected users is unknown.
Recommendations: Monitor financial accounts for suspicious activity and unauthorized transactions.; Exercise caution with unsolicited communications to prevent phishing and identity theft.; Update passwords and enable multi-factor authentication on all retail accounts.
Source: Inside Retail Asia
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source
Latest Developments
Update — 2026-07-31 15:10 UTC
Unauthorized access to customer PII and partial payment data via a system vulnerability. Exposure of names, contact details, and order history, increasing the risk of targeted fraud. The breach resulted from a system vulnerability that allowed unauthorized access to customer profiles and partial payment details. While full credit card numbers were protected by a third-party processor, the leaked personal data is sufficient for sophisticated social engineering attacks. The company has patched the flaw and notified law enforcement.
Corroborating source: scmp.com