THE WHAT? Procter & Gamble’s First Aid Beauty (FAB) skin care brand has been the subject of a cyber attack, according to a report published by the Cincinnati Business Courier. A Margcart attack was detected by a researcher, William de Groot of Sanguine Security, whose role is to track payment and skimming fraud, on October 25, 2019.
THE DETAILS De Groot asserts that the malware has been in place since May 5. As a result of the discovery, the site has been taken down. A spokesperson for P&G told the Cincinnati Business Courier that the beauty subsidiary’s software, hardware and data are ‘separate and distinct’ from the US FMCG giant’s other e-commerce operations.
“We have no indication at this time that any other P&G sites are impacted,” Christine Wever told the Cincinnati Business Courier. “As soon as we learned about the compromise of the First Aid Beauty site, we moved quickly to take the site down… We are currently investigating the source of the malware and working to identify and notify those consumers who might have been impacted to ensure we provide them the necessary support.”
THE WHY? Procter & Gamble is seeking to minimise the impact of the breach. Balanced against maintaining consumer trust in its ability to protect their sensitive information, the temporary loss of sales is a small price to pay. Will it work? Well, de Groot noted that the US FMCG giant took a good week to respond to his report and the program has been in place for nigh on six months. You do the math.