White Essence: unauthorized access to its booking site and core system

White Essence, a teeth whitening service, found unauthorized access on 5 August and stopped its booking site and core system from 12 August. Its 5 October announcement said a vulnerability in the booking site's program was exploited and used as a foothold into the core system. Data of about 1.05 million accounts registered as of 5 August was taken, including names, addresses, phone numbers, emails, birth dates, genders, employers and encrypted login IDs and passwords. Affected people include customers, member clinic staff and head office employees.