Step: payment module of the SteP SPORTS Online Shop altered, data of 63 cards at risk

1. 2019-12-03

   The company's system contractor warned of a possible leak, and card payment was stopped the same day. An outside firm was hired to investigate. [1]

2. 2020-01-08

   The investigation found that a flaw had been used to alter the payment application. [1]

3. 2020-01-21

   The company reported to the Sumiyoshi police, and to the PPC on 31 January. [1]

4. 2020-03-24

   Public disclosure. [1]

Card data of {n:63} customers who paid from 29 November to 3 December 2019 (name, number, expiry, security code) may have leaked, and some may have been misused. [1]