Fukuya: FUKUYA ONLINE was accessed without authorization and its payment program was altered, so card data of 1,779 customers may have leaked

1. 2021-02-15

   From this day, a vulnerability in the site was exploited, the payment program was altered, and a fake card entry screen was embedded. [1] [2]

2. 2021-05-06

   A card payment agent reported fraudulent use, and the site was closed the same day. [1] [2]

3. 2021-05-28

   The malicious program was removed. [1]

4. 2021-06-10

   A third-party firm reported that its investigation was complete. [1] [2]

5. 2021-06-24

   It reported the damage to a police station. [1] [2]

6. 2021-07-06

   It reported to the Personal Information Protection Commission. [1] [2]

7. 2021-08-16

   It announced the case, began contacting the customers concerned and set up a dedicated call center. [1] [2]

The names, numbers, expiry dates and security codes of 1,779 customers who paid by card between February 15 and March 19, 2021 may have leaked. The customer database was also reachable, but no record of data being taken was found. [1] [2]

The company said that, after talking with its payment agent, it decided to announce only after the third-party investigation result and coordination with the card companies. [1]