Kyoto Takao Club: its low-carb food online shop Toshitsu Seigen Dot Com was accessed without authorization and its payment application was altered, so card data of 3,877 customers may have leaked and been misused

1. 2020-01-28

   From this day, a vulnerability of the site was exploited and the payment application was altered, so card data began to leak. [1] [2]

2. 2021-01-15

   A credit card company pointed out a possible leak and the problem came to light. Card payments were stopped as of this day. [1] [2]

3. 2021-02-04

   It reported to the Personal Information Protection Commission. [1]

4. 2021-02-05

   It consulted the police. [1]

5. 2021-03-22

   The investigation by an outside firm finished. [1]

6. 2021-06-16

   It announced the case and began contacting the customers concerned individually by email. [1] [2]

Of the card data used on the site between January 28, 2020 and January 15, 2021, when payments were stopped, the names, numbers, expiry dates and security codes of 3,877 customers may have leaked and been misused. Customers were urged to watch for charges they do not recognize. [1] [2]