FLYWAY: the "BIRDS’ WORDS online store" was accessed without authorization and card data of 2,763 customers may have leaked

1. 2021-11-16

   Some card companies told it through its payment processor of concerns about leaked card data. It stopped card payments and the site the same day, preserved the data on the site and began an investigation by a third-party firm. [1]

2. 2021-12-15

   The investigation finished and confirmed that card data had leaked and some might have been misused. [1]

3. 2022-01-14

   It reported the damage to the police. [1]

4. 2022-02-08

   It reported to the Personal Information Protection Commission. [1]

5. 2022-03-07

   It announced the case and notified affected customers by email. [1] [2]

The card holder names, numbers, expiry dates and security codes of 2,763 customers who paid by card between April 25 and October 31, 2021 may have leaked. A vulnerability in part of the system was exploited and the payment application was altered. The database holding order and personal data was reachable, but no leak of data other than card data is confirmed. [1] [2]