infinite: its "infinite WEB SHOP" was accessed without authorization and its payment application was tampered with, card data of up to 2,083 customers may have leaked, and the site was closed

1. 2020-07-03

   From this day, a vulnerability in the site's system was exploited, the payment application was tampered with and data began to leak. [1]

2. 2021-10-10

   Some customers told the company of a concern that card data had leaked, and it investigated internally. [1]

3. 2021-10-27

   It confirmed unauthorized access by a third party, stopped the site the same day and started an investigation by a third-party firm. [1]

4. 2021-11-01

   It reported to the police. [1]

5. 2022-01-24

   The investigation by the firm finished. [1]

6. 2022-07-08

   It announced the case and began contacting the customers concerned individually. [1] [2]

Among customers who used the site from July 3, 2020 to October 27, 2021, up to 2,959 had their login ID and password exposed, up to 2,730 who bought something may have had their name, address, phone number, company name and order details viewed, and up to 2,083 who paid by card may have had their card holder name, number, expiry date and security code leaked. Some cards may have been misused. The site was closed and is not expected to reopen. The opening of the notice mentions 2,218 card records and 2,959 personal records, but the breakdown in the body gives the figures above. [1] [2]