FLAVA: its fashion online shops jiggys-shop.jp and crazy-ferret.jp were accessed without authorization, and card data of 6,316 customers may have leaked, with 618 possibly misused

1. 2020-02-05

   From this day, the external EC platform server the company used was accessed without authorization, a program that sent entered card data outside was planted, and the data began to leak. [1]

2. 2021-02-05

   A payment agent told the company of a concern about a card data leak on jiggys-shop.jp, and card payments there were stopped the same day. [1]

3. 2021-02-08

   A concern about a leak on crazy-ferret.jp also came to light, and card payments there were stopped the same day. [1]

4. 2021-02-09

   An investigation by a third-party firm began. [1]

5. 2021-03-16

   As of this day, card data of 618 customers may have been misused. [1]

6. 2021-05-26

   The investigation finished. The company reported to the Personal Information Protection Commission and told the police of the damage. [1]

7. 2021-07-19

   It announced the case and began contacting the customers concerned individually by email. [1]

The names, numbers, expiry dates and security codes of customers who newly entered card data between February 5, 2020 and February 8, 2021 may have leaked: 2,312 at jiggys-shop.jp and 4,004 at crazy-ferret.jp. The two sites will not reopen. [1]