Oka: "Mat & Rug Factory Honten" was accessed without authorization, and card data of up to 1,569 customers and personal data of up to 7,086 may have leaked

1. 2021-07-27

   Some card companies told it of concerns about leaked card data. It stopped card payments the same day and began an investigation by a third-party firm. [1]

2. 2021-10-29

   The investigation finished and confirmed that card data had leaked and some might have been misused. [1]

3. 2021-12-27

   It reported to the Personal Information Protection Commission and filed a damage report with the police. [1]

4. 2022-02-21

   It announced the case and notified affected customers by email. AEON Bank also urged its members to be careful. [1] [2]

The card holder names, numbers, expiry dates and security codes, and member login IDs and passwords, of up to 1,569 customers who paid by card between December 30, 2020 and July 10, 2021 may have leaked. Names, addresses, phone numbers, email addresses, birth dates, genders and occupations of all customers who bought up to July 27, 2021 (up to 7,086) may also have leaked. A vulnerability in part of the system was exploited and the payment application was altered. It explained that it delayed the announcement to wait for the investigation result and coordination with card companies, after consulting its payment processor. [1]