Women’s vintage clothing Web site Unique Vintage recently began notifying an undisclosed number of customers that their personal information may have been exposed as a result of a data breach.
“Unique Vintage is Payment Card Industry Security Standards Council (‘PCI‘) compliant and implements the latest measures reasonbly possible to protect its customers’ sensitive information,” the company wrote in the notification letter [PDF]. “However, the very sophisticated data breach concerning this incident involved malicious malware that was siphoning customer information from Unique Vintage’s Web site from approximately January 2012 until September 14, 2013.”
The information accessed included customers’ names, e-mail addresses, phone numbers and credit card numbers.
When the breach was discovered on September 14, 2013, he company says it immediately “eliminated the breach,” notified law enforcement, and filed a complaint with the Internet Crime Complaint Center.
All those affected are being advised to contact their credit card issuers and close their accounts, though no credit protection services are being offered.
Customers with questions are advised to contact the company at (800) 721-6589.