Idemitsu Credit: an outside service used on its card application screen was tampered with, and card data entered there may have leaked

1. 2022-07-19

   From this day to July 26, information entered on the new registration and re-registration screens may have leaked. [1]

2. 2022-07-28

   The provider of a screen-display optimization service told the company that its system had been tampered with. [1]

3. 2022-08-01

   It reported to the Ministry of Economy, Trade and Industry and the Kanto Local Finance Bureau. [1]

4. 2022-08-04

   It announced the case. [1]

5. 2022-10-26

   It published a follow-up. It named the service provider as Showcase and corrected the period of possible leak. It emailed the newly affected members. [2]

The card numbers, expiry dates, security codes and birth dates entered on the registration screens may have leaked. The number of people was not known at the time of the announcement. No misuse has been confirmed so far. [1]

The follow-up identified the outside service provider as Showcase. The period of possible leak was corrected to July 19 7:49 to 7:58, July 21 10:39 to July 26 20:33, and July 27 9:53 to July 29 0:20. The data concerned is the card number, expiry date, security code and birth date. Damage to other companies from the same cause is covered in the Showcase incident. [2]