Marukan: its online shop was accessed without authorization, and card data of 1,152 customers may have leaked

1. 2021-06-21

   It had closed the online shop and stopped all card payments. [1]

2. 2021-06-30

   Some card companies told it of concerns about leaked card data, and it began an investigation by a third-party firm. [1] [2]

3. 2021-08-20

   The investigation finished and confirmed that card data had leaked and some might have been misused. [1] [2]

4. 2021-10-05

   It reported to the Personal Information Protection Commission. [1]

5. 2021-10-06

   It filed a damage report with the police. [1]

6. 2022-01-12

   It announced the case and notified affected customers by email. [1] [2]

The card holder names, numbers, expiry dates and security codes of 1,152 customers who paid by card between August 5, 2019 and June 21, 2021 may have leaked. A vulnerability in part of the system was exploited and the payment application was altered. The site is closed and there is no plan to reopen it. [1] [2]