Titicaca: its online shop was accessed without authorization, and card data of 861 customers may have leaked

1. 2021-10-21

   A customer reported purchases they did not recognize. [1] [2]

2. 2021-10-25

   It stopped card payments. [1] [2]

3. 2021-10-28

   It reported to the Personal Information Protection Commission and filed a damage report with the police. [1]

4. 2021-10-29

   It stopped the site and began an investigation by a third-party firm. [1] [2]

5. 2021-11-26

   The investigation finished and confirmed that card data might have leaked. [1] [2]

6. 2021-12-23

   It announced the case and notified affected customers by email. [1] [2]

The card holder names, numbers, expiry dates and security codes of 861 customers who paid by card between September 29 and October 29, 2021 may have leaked. A vulnerability in part of the system was exploited and the payment application was altered. Some cards may have been misused. [1] [2]