AkaraN: the "akaran official online store" was accessed without authorization and card data of 8,483 customers may have leaked

1. 2022-06-23

   Some card companies told it of a concern that card data had leaked. It also reported to the Personal Information Protection Commission. [1] [2]

2. 2022-06-24

   It stopped card payments and started an investigation by a third-party firm. [1]

3. 2022-08-30

   The investigation finished and found that unauthorized access exploiting a vulnerability of the old system had tampered with the payment module. [1] [2]

4. 2022-11-17

   It announced the case and began emailing the customers concerned. [1] [2]

The card holder name, number, expiry date, security code, email address and phone number of 8,483 customers who paid by card from December 16, 2020 to December 8, 2021 may have leaked, and some may have been misused. The store moved to a new system on April 5, 2022, so those who used it before are covered. [1] [2]