Nasu Rusk Terrace: the payment application of its online shop was tampered with, and 203 sets of card data may have leaked

1. 2019-10-26

   From this day, attackers exploited a weakness in the site's system, tampered with the payment application and could steal card data. [2] [3]

2. 2020-11-10

   A card company told the firm that card data of its customers seemed to be leaking. The same day it stopped card payments and had a third-party firm investigate. [3]

3. 2021-01-07

   The investigation finished and confirmed the leak of card data and possible misuse of some. [2] [3]

4. 2021-01-20

   It reported to the Personal Information Protection Commission and filed a damage report with the police. [2] [3]

5. 2021-02-08

   The company disclosed the case. [1] [3]

The affected are 203 sets of card data from 192 customers who paid by card on the site during the period, including the holder name, number, expiry date and security code. The firm is watching transactions on the possibly leaked cards with the card companies and asked customers to check their statements. [2] [3]

Rakuten Card also told its members to check their statements, saying the company had made an announcement. [1]