[Resolved][Severity: Critical][Intrusion]

URBAN RESEARCH: its official online store was accessed without authorization, and names, addresses and birth dates of 317,326 UR CLUB members may have leaked

Unauthorized access from the night of March 7 to noon on March 8 may have leaked member data. Card numbers are not included.

Disclosed

2021-03-10

Organizations involved

Leaked or at risk

317.3K

317,326

Downtime

Unknown

What happened

2021-03-07 18:00
From around this evening, the official online store was accessed without authorization. [1] [4]
2021-03-08
The access continued until noon. The same day the company confirmed it, blocked traffic from a group of IP addresses and tightened its security settings. [1] [4]
2021-03-10
The company disclosed the case. [1] [2]

Impact

The data that may have leaked are those of 317,326 UR CLUB members linked to the online store, including addresses, names, phone numbers, mail addresses, birth dates, genders, member IDs and member stages. The company said card numbers were not included and no secondary damage had been found. [1] [4]

The company notified the possibly affected members individually, suspended their memberships, reported to the Personal Information Protection Commission and set up a help line. [1] [2]