Utsunomiya Cable Television: its shopping site "Iimono, Aruyo!" was accessed without authorization and card data of 975 customers may have leaked

1. 2021-11-18

   An internal investigation entrusted to a system developer confirmed concern that customer card data had leaked. It cut off external access, stopped the shopping site and began an investigation by a third-party firm. [1] [2]

2. 2021-12-03

   It replaced the affected system and server and resumed sales except for card payments. [1]

3. 2022-01-28

   The investigation finished and confirmed that card data had leaked and some might have been misused. [1]

4. 2022-04-25

   It announced the case and began notifying affected people by email the same day. [1] [3]

Card holder names, numbers, expiry dates, security codes and 3-D Secure codes of 975 customers who paid by card from October 26 to November 18, 2021 may have leaked. The cause was a flaw in the system that let an attacker place a malicious file and alter the payment application. Resumption of card payment is undecided. [1] [2]