IVY C.S.: a fake payment form on the Aoyama Gakuin store online shop may have exposed card data of 519 people and up to 7,808 customer records

1. 2019-06-25

   From this day to May 12, 2020, the site's payment app was altered, and card details entered in a fake payment form could be stolen. [1]

2. 2020-05-12

   A card company warned of a possible leak, and the problem came to light. [1]

3. 2020-06-29

   The outside investigation was completed. A later additional check found that data of customers who registered or ordered was affected too. [1]

4. 2020-08-31

   The company reported the case to the police and the Personal Information Protection Commission. [1]

5. 2020-10-07

   Emails to affected customers began. [1]

Card name, number, expiry date and security code of up to 519 people may have been stolen, and fraudulent use was confirmed. Anyone who typed card details into the fake form was at risk, even without completing a purchase. [1]

Up to 7,808 records of customers who registered or ordered from June 2, 2015 to September 16, 2020 may also have leaked: 2,330 member records and 5,478 order records with names, addresses, phone numbers, birth dates, gender, employer, mail addresses, occupation and delivery addresses. [1]