Seiwa: its three sites were accessed without authorization and order data of 5,548 people and card data of 423 may have leaked

1. 2021-12-08

   A security self-check of the servers found malicious software, which it deleted. [1]

2. 2021-12-17

   It closed the "Seiwa Online Shop" and "Shinjidai Nogyo Juku", which have payment functions. [1]

3. 2022-02-01

   A staff member reported misuse of card data. [1]

4. 2022-02-19

   Another staff member also reported misuse, and several reports made it recognize the damage. [1]

5. 2022-02-22

   It reported to the Personal Information Protection Commission and filed a damage report with the police. [1]

6. 2022-03-11

   A third-party firm began an investigation. [1]

7. 2022-03-31

   The investigation finished. [1]

8. 2022-06-07

   It announced the case. [1] [2]

Names, company names, addresses, email addresses, passwords, phone numbers, fax numbers, birthdays and genders of 5,548 customers who registered on the three sites from January 23, 2013 to February 7, 2022 may have leaked. They include card holder names, numbers, expiry dates and security codes of 423 people who paid by card from May 1, 2020 to December 17, 2021. A third party broke in, altered files and ran a malicious program that wrote out even data that should not remain on the server. Announcement was delayed because it waited for the investigator's result and coordination with card companies. [1]