[Resolved][Severity: Critical][Web app exploit]

Dental Diamond: intrusion into its website shop may have leaked credit card data of 690 customers

Card data of customers who paid by card from April to August 2020 was taken, and some may have been misused. Card companies flagged it in October.

Disclosed

2020-12-16

Organizations involved

Leaked or at risk

690

Downtime

Unknown

What happened

2020-04-30
Card data of customers who paid by card from this day to August 25 may have leaked. [1] [2]
2020-10-02
Some card companies reported fears of a card data leak, and the firm stopped card payments the same day. [1] [2]
2020-11-20
An outside investigation ended and confirmed the cause as unauthorized access through a system weakness. [1] [2]
2020-12-03
The firm reported the damage to the police, and on the 4th reported to the Personal Information Protection Commission. [1] [2]
2020-12-16
The firm disclosed the case and began notifying customers by mail and letter. [1] [2]

Impact

The card holder name, number, expiry date and security code of 690 customers who paid by card between April 30 and August 25, 2020 may have leaked, and some may have been misused. The firm is monitoring transactions with the card companies and asks customers to check their statements. [1] [2]