The website of Bulletproof 360 was infected with a malware that stole customers financial and personal data. Stolen data included bank card numbers, expiration dates, and security codes (CVV), as well as names, postal addresses, and email addresses. The security breach was discovered mid-October, but it was publicly disclosed only on Monday to California officials, in compliance with the US states security breach notification laws. The company is inviting its customers to remain vigilant to the possibility of fraud by reviewing their payment card account statements for any unauthorized activity.”]
Source: https://securityaffairs.co/wordpress/66100/data-breach/bulletproof-360-hacked.html