Kenko Ikiiki Club: the program of its official online store was tampered with, possibly leaking 3,308 card records, and the server holding personal data was also accessed

1. 2019-12-14

   From this day, the tampered program may have recorded card data. [1] [2]

2. 2020-12-04

   A card company pointed out the problem and the store stopped card payments the same day. [1] [2]

3. 2021-01-31

   The outside investigation ended. [1] [2]

4. 2021-03-15

   The company reported to the Personal Information Protection Commission and filed a report with the police. [1] [2]

5. 2021-03-29

   The company announced the case. [1] [2]

The name, number, expiry date and security code of 3,308 customers who registered or changed card details between December 14, 2019 and December 4, 2020 may have leaked. [1] [2]

Logs showed that the server holding other personal data was also accessed, but the number and scope could not be determined. [1] [2]