Hosendo: servers of its online shops Suppon Collagen and Hosendo Power Life were accessed without authorization, possibly leaking addresses, birth dates and card data of 243 customers

1. 2020-09-14

   The company noticed a server failure and found that files holding personal data may have been deleted or leaked. [1] [2]

2. 2020-09-15

   The company filed a report with the police. [1] [2]

3. 2020-09-16

   The company restricted access to the two sites and stopped card payments. [2]

4. 2020-10-08

   An outside investigation began. [1] [2]

5. 2020-12-07

   The investigation ended. [1] [2]

6. 2020-12-10

   The company reported to the Personal Information Protection Commission. [1] [2]

7. 2021-03-23

   The company announced the case and informed the customers concerned by email and letter. [1] [2]

At Suppon Collagen, 15 people who bought between June 15 and October 26, 2019 are affected (4 paid by card, 11 otherwise). At Hosendo Power Life, 228 people who bought between September 19, 2014 and November 9, 2017 are affected (73 by card, 155 otherwise): 243 in total. [1] [2]

The data that may have leaked includes addresses, phone numbers, birth dates and email addresses, plus card names, numbers and expiry dates for customers who paid by card. [1] [2]