Clarins Singapore hit with customer data leak

13 Jan 2022 --- The Singapore arm of France-based cosmetics company Clarins has experienced a cybersecurity threat that involved a data breach of some of it’s Singaporean customers’ personal information. As e-commerce becomes an increasingly significant part of the beauty industry, potential threats are a key concern.

The leak reportedly includes name, email, address, phone number and details relating to Clarins loyalty program status. 

However, a spokesperson for Clarins tells PersonalCareInsights that the breach did not include passwords, payment information or credit card details. This is because Clarins does not store sensitive data on the server, notes the company.

Precautions to ensure security and trust 
A software called Log4j was used to manage Clarins database. Organizations and companies that currently use the software, should immediately update it to version 2.16.0, advises the Cybersecurity Agency of Singapore (CAS). Log4j is a software that works for Java-based applications. 

The Clarins spokesperson adds that Clarins Singapore has followed local regulations and notified the breach to “Singapore Personal Data ProtectionClarins’ long-term vision includes focusing on strong customer relations, innovation and responsible beauty.Commission and its customers.”

Additionally, Clarins has “promptly implemented security patches…to prevent a recurrence of such an attack and to protect the privacy of our valued clients.” 

The breach in Singapore led to adding other security patches internationally, and also tightening Clarins cyber security as a preventative measure. 

Singaporean authorities are also patching up government systems as a result.

Clarins advises its customers to be wary of calls, emails and texts and to change their login password.

The data breach occurred due to a vulnerability in the Log4j software. If attackers successfully exploit the vulnerability, they can gain complete control over the servers. 

Rising e-commerce within personal care
This breach comes at a time when e-commerce is taking off across the personal care industry. 

In tandem, rising numbers of companies, especially internationally and virtually means that consumers have more choices than before – making their opinions all the more important.

Notably, Innova Market Insights crowned “Voice of the Consumer” as one of its top trends for 2022. 

Transparency and openness is vital to building customer trust. Ensuring the security of customers' information can help build customer trust. 

By Venya Patel