Why were full credit card details not exposed?

Question

Accepted Answer

Full Credit Card Details Were Not Exposed Due to Payment Processor Handling

Love, Bonito has stated that full credit card details were not compromised in the recent security incident. This is because the processing and storage of such sensitive payment information are handled directly by their third-party payment processor, not by Love, Bonito itself. Consequently, the fashion retailer does not possess or retain access to customers' complete credit card numbers, expiry dates, or CVV codes.
Secure Processing by External Payment Processor

The company has clarified that while some partial payment information, such as the card type, the last four digits of card numbers, and expiry dates, might have been exposed, the entirety of the credit card details were secured. This is attributed to the standard industry practice where payment processors manage the sensitive data. Love, Bonito's operational model ensures it does not have direct access to or store this critical financial information, thereby mitigating the risk of its exposure during a breach on their systems.
Scope of Potentially Exposed Data

The data potentially accessed by unauthorised parties includes customers' names, dates of birth, email addresses, shipping addresses, phone numbers, and order history. This range of information, while not including full payment credentials, could still be used for malicious purposes. The company identified and rectified the website vulnerability on July 26 and has initiated investigations into the incident.
Proactive Security Measures and Reporting

Following the identification of the vulnerability, Love, Bonito has taken steps to secure its systems. The company has notified the relevant data protection authority and reported the incident to law enforcement agencies. CEO Dione Song communicated in an email to customers that the company is continuing to audit and review its security measures, aiming to implement further improvements to prevent future occurrences. Customers have been advised to remain vigilant against potential phishing scams and to monitor their payment card activity for any suspicious transactions.

Reading history

Hide →

This history is cleared when the page is closed.

Why were full credit card details not exposed?

Loading

Was this article helpful?

Helpful

Not helpful

Report an issue

1

0

0

Share with friends