S Point: about 10 million login attempts on the member site broke into 1,094 accounts

1. 2020-07-24

   From this day to August 2, about 10 million login attempts came from several foreign IP addresses. [1] [2]

2. 2020-08-06

   The attack was discovered and the member site was suspended. [1] [2]

3. 2020-08-10

   The entered accounts were locked. [2]

4. 2020-08-11

   Public disclosure; affected members were informed by email. [2]

5. 2020-09-15

   The member site reopened, and users were asked to set new passwords. The terms of use were revised along with the new login method. [3]

1,094 accounts were entered. Names and point balances of 44 members were seen, and exchanges into other companies' points were started for them. 43 were stopped in time, but one member's 1,000 points were exchanged. [1] [2]

The attackers' IP addresses were blocked and the 44 members were asked by phone to change their IDs and passwords. The site stayed down while security was improved, and the police were informed. [2]