[Resolved][Severity: Critical][Web app exploit]

Claudia: its health food online shop Claudia HP was accessed without authorization and its payment application was altered, so data of 8,644 cards may have leaked and been misused

The payment application was altered, and data of 8,644 cards from about a year may have leaked and been misused.

Disclosed

2021-06-14

Organizations involved

Leaked or at risk

8.6K

8,644

Downtime

Unknown

What happened

2019-10-04
From this day, a vulnerability of the site was exploited and the payment application was altered, so card data used for payments began to leak outside. [2] [3]
2020-10-08
A credit card company pointed out a possible leak of card data and the problem came to light. [2] [3]
2021-02-28
The investigation finished. [2]
2021-03-30
It reported to the Personal Information Protection Commission and the police. [2]
2021-06-14
It announced the case and began contacting the customers concerned by email or letter. [1] [2] [3]

Impact

The names, numbers, expiry dates, security codes and the like of 8,644 cards used for payments between October 4, 2019 and October 8, 2020 may have leaked and been misused. Customers were asked to check for charges they do not recognize. [2] [3]