Cybercriminals spoofed the email id of Nykaa’s Italian vendor and tricked the company into sending payment to some other bank account. Nykaa was informed that all future transactions will be conducted through the same account. The company lost Rs 62L to the scamsters. However, it reported no breach of consumer data. The fraud was discovered when the original vendor asked for the payment.