Privacy Ninja



        • Secure your network against various threat points. VA starts at only S$1,000, while VAPT starts at S$4,000. With Price Beat Guarantee!

        • API Penetration Testing
        • Enhance your digital security posture with our approach that identifies and addresses vulnerabilities within your API framework, ensuring robust protection against cyber threats targeting your digital interfaces.

        • On-Prem & Cloud Network Penetration Testing
        • Boost your network’s resilience with our assessment that uncovers security gaps, so you can strengthen your defences against sophisticated cyber threats targeting your network

        • Web Penetration Testing
        • Fortify your web presence with our specialised web app penetration testing service, designed to uncover and address vulnerabilities, ensuring your website stands resilient against online threats

        • Mobile Penetration Testing
        • Strengthen your mobile ecosystem’s resilience with our in-depth penetration testing service. From applications to underlying systems, we meticulously probe for vulnerabilities

        • Cyber Hygiene Training
        • Empower your team with essential cybersecurity knowledge, covering the latest vulnerabilities, best practices, and proactive defence strategies

        • Thick Client Penetration Testing
        • Elevate your application’s security with our thorough thick client penetration testing service. From standalone desktop applications to complex client-server systems, we meticulously probe for vulnerabilities to fortify your software against potential cyber threats.

        • Source Code Review
        • Ensure the integrity and security of your codebase with our comprehensive service, meticulously analysing code quality, identifying vulnerabilities, and optimising performance for various types of applications, scripts, plugins, and more

        • Email Spoofing Prevention
        • Check if your organisation’s email is vulnerable to hackers and put a stop to it. Receive your free test today!

        • Email Phishing Excercise
        • Strengthen your defense against email threats via simulated attacks that test and educate your team on spotting malicious emails, reducing breach risks and boosting security.

        • Cyber Essentials Bundle
        • Equip your organisation with essential cyber protection through our packages, featuring quarterly breached accounts monitoring, email phishing campaigns, cyber hygiene training, and more. LAUNCHING SOON.

Gold Seller JM Bullion Hacked To Steal Customers’ Credit Cards

Gold Seller JM Bullion Hacked To Steal Customers’ Credit Cards

Precious metal online retailer JM Bullion has disclosed a data breach after their site was hacked to include malicious scripts that stole customers’ credit card information.

JM Bullion is an online retailer of gold, silver, copper, platinum, and palladium products, including coins and bullion.

According to a ‘Notice of Data Security Incident’ sent to customers, JM Bullion’s web site was hacked in the middle of February 2020, when a malicious script was added to the site. 

JM Bullion Notice of Data Security Incident
Source: Reddit

The malicious scripts were present on the site between February 18th, 2020, and July 17th, 2020, and caused any submitted payment information to be sent to a remote server under the attacker’s control.

Also Read: How To Prevent WhatsApp Hack: 7 Best Practices

“On July 6, 2020, JM Bullion was alerted to suspicious activity on its website. JM Bullion immediately began an investigation, with the assistance of a third-party forensic specialist, to assess the nature and scope of the incident. Through an investigation, it was determined that malicious code was present on the website from February 18, 2020 to July 17, 2020, which had the ability to capture customer information entered into the website in limited scenarios while making a purchase,” JM Bullion’s data security incident stated.

This type of compromise is known as a MageCart attack and consists of hackers compromising a website to inject malicious JavaScript scripts into various web site sections. These scripts wait for payment information to be entered by the customer, which is then stolen and sent to a remote server under the hacker’s control.

As part of this breach, attackers could steal customers’ names, addresses, and payment card information, including the account number, expiration date, and security codes.

The malicious code was removed from the site on July 17th, 2020, and JM Bullion notified law enforcement, their credit card processor, and all impacted credit card brands.

All customers who made purchases on JM Bullion’s site between February 18th, 2020, to July 17th, 2020, should monitor their credit card statements for fraudulent activity.

If any activity is discovered, it should immediately be reported to the associated credit card company as fraud.

Also Read: 15 Best Tools For Your Windows 10 Privacy Settings Setup



Subscribe to our mailing list to get free tips on Data Protection and Data Privacy updates weekly!

Personal Data Protection


We have assisted numerous companies to prepare proper and accurate reports to PDPC to minimise financial penalties.


Click one of our contacts below to chat on WhatsApp

× Chat with us