Spick: its Lipo Capsule Vitamin C shop was accessed without authorization, and card data of 9,515 customers and login data of 15,674 members may have leaked

1. 2020-11-06

   From this day, data began to leak. [1]

2. 2021-02-16

   The security firm it had hired reported possible unauthorized access. A malicious file was deleted and passwords were changed. [1] [2]

3. 2021-02-24

   The card payment function was stopped. The period of the data leak ended on this day. [1] [2]

4. 2021-03-04

   The cart system that had been accessed was closed and replaced by a new site in a different environment. [1] [2]

5. 2021-07-21

   The investigation by a third-party firm finished. [1]

6. 2021-08-06

   It reported to the Personal Information Protection Commission and consulted the police. [1]

7. 2021-09-29

   It announced the case. [1] [2]

Card data of 9,515 customers who paid by card between November 6, 2020 and February 24, 2021, and email addresses and passwords of 15,674 members who logged in and entered member data, may have leaked. The investigation could not pin down the numbers, which were worked out from payment records and similar data. [1] [2]