[Resolved][Severity: Critical][Web app exploit]

New Memphis: intrusion into the MEMPHIS STORE online shop may have leaked credit card data of 211 customers

Card data of customers who paid by card from June 2019 to July 2020 was taken, and some cards may have been misused. The site has been closed.

Disclosed

2020-12-24

Organizations involved

Leaked or at risk

211

Downtime

Unknown

What happened

2019-06-11
Card data of customers who paid by card from this day to July 10, 2020 may have leaked. [1] [2]
2020-07-03
Some card companies reported fears of a card data leak among customers, and the shop stopped card payments the same day. It took the site down on the 9th. [1] [2]
2020-09-30
An outside investigation ended and confirmed the cause as unauthorized access through a system weakness. [1] [2]
2020-11-30
The shop reported to the Personal Information Protection Commission and the police. [1] [2]
2020-12-24
The shop disclosed the case and began notifying customers by mail and letter. [1] [2]

Impact

The card holder name, number, expiry date and security code of 211 customers who paid by card between June 11, 2019 and July 10, 2020 may have leaked, and some may have been misused. The shop is monitoring transactions with the card companies and asks customers to check their statements. [1] [2]