A clothing and shoes retailer has reported a breach of its online boutique that compromised customers' personal details, BankInfoSecurity reports. Customers making online purchases between February 16 and March 21 are at risk due to malware discovered on the site, according to the company's CEO in a letter to those affected. "Unfortunately, the hacker may have accessed the names, addresses and credit card information of customers who purchased an item on our website during this period," the letter said. As an e-commerce site, the company is not required to undergo PCI-DSS audits, but can self-assess, which one expert says is a checklist retailers don't take seriously.
Full Story