Malware infiltrated Bulletproof 360's website, stealing personal and financial information from its clients. The company that specialises in coffee with butter added admitted that hackers had been inserting malicious code onto its website for months in order to steal credit card information. Names, postal addresses, email addresses, bank card numbers, expiration dates, and security codes (CVV) were among the stolen information. Bulletproof 360 declared that it is making a concerted effort to strengthen system security and promised to stop similar security breaches in the future.

Bulletproof 360, Inc. suffered a data breach where malicious actors injected unauthorized code into its e-commerce checkout page. This compromise exposed sensitive customer information, including names, addresses, email addresses, payment card numbers, expiration dates, and card security codes over multiple periods. The breach was detected on October 13, 2016, but the official report was filed over a year later, on November 27, 2017. The incident highlights a severe failure in payment processing security, allowing attackers to harvest financial data directly from transactions. Given the nature of the stolen information—full payment card details—customers faced heightened risks of fraud, identity theft, and unauthorized transactions. The prolonged exposure period before detection further exacerbated the potential damage, as the compromised data could have been exploited for extended fraudulent activity. The breach underscores vulnerabilities in the company’s web infrastructure, particularly in safeguarding payment gateways against code injection attacks. While the report does not specify ransomware involvement, the scale and sensitivity of the leaked data suggest a high-impact cyber attack with lasting repercussions for both the company’s reputation and customer trust.