It might be a good thing that the BWX Ltd (ASX: BWX) share price remains halted today.
That's because the personal care products company has become the latest victim of a cyberattack.
What's going on with this ASX All Ords share?
This morning, BWX revealed that its Flora & Fauna business has identified that a malicious code unlawfully inserted into its website may have resulted in customer credit card numbers and expiry dates being transmitted to an unauthorised third-party.
The release notes that approximately 2,500 customers, who transacted on the Flora & Fauna website between 13 August 2022 and 29 September 2022, may have been impacted by the cyberattack.
BWX highlights that only credit card numbers and expiry dates appear to have been transmitted to the unauthorised third party. No other personal information, such as customer names, CVV codes, passwords, or other information entered at checkout have been accessed.
What remains unclear, though, is what changed on 29 September to stop the code and how long the company has known about the attack.
'Considerable concern'
BWX's CEO, Rory Gration, commented
We apologise to our Flora & Fauna customers who will experience considerable concern due to this cyber incident. We take the privacy and security of customer data very seriously and we want to assure our customers that we acted promptly to identify, isolate and remove the malicious code on the Flora & Fauna website, as well as taking additional steps to upgrade security on the Flora & Fauna website. We have notified potentially affected customers of the breach, explained steps they can take to limit risk to their information and will ensure affected customers are provided with appropriate information and support.
Why is the BWX share price suspended?
The BWX share price has been out of action since August at the company's request.
This is because it is taking BWX an alarming amount of time to prepare its audited accounts after identifying irregularities in its financial reports.
The company recently extended its suspension, explaining:
BWX advises that this timeline has been extended, with the release of audited accounts – including certain revenue recognition issues for FY21 and 1H FY22 and the likely impairment of intangible assets – expected in mid-November 2022. The Board considers it imperative that the audit and any adjustments are completed accurately, which necessitates additional time.
