Kousoku Offset: the sales site for a Yuzuru Hanyu calendar was broken into, and card data of 1,469 buyers may have leaked

1. 2020-11-20

   The company noticed suspicious access and stopped online sales. [1]

2. 2020-11-30

   It announced the possible intrusion before the investigation was complete. [1]

3. 2021-03-31

   The investigation was completed. [2]

4. 2021-04-16

   The company reported the case to the Personal Information Protection Commission. [2]

5. 2021-05-12

   The company notified the affected customers by email and letter. [2]

Names, addresses, phone numbers, mail addresses, card data and, where entered, birth dates, gender and employers of 1,469 buyers who ordered from November 11 to 21 may have leaked. [1]

The investigation found that the data of 1,771 people who registered on the site or bought from it between November 11 and 21, 2020 may have been viewed. For 380 of them, who bought between November 16 and 21, the payment program had been tampered with, so the card holder name, number, expiry date and security code may also have leaked. The site will not reopen. The police were consulted on November 30. [2]