GENTOS: the "GENTOS official store" was accessed without authorization and 5,471 card records and personal data of up to 5,521 people may have leaked

1. 2022-08-12

   Some card companies told it of a concern that card data had leaked, and it stopped card payments the same day. [1]

2. 2022-08-17

   It reported to the Personal Information Protection Commission, and consulted the police from August 24. [1]

3. 2022-10-06

   The investigation finished and found a vulnerability that allowed tampering with the payment application. [1]

4. 2022-11-28

   It announced the case. [1] [2]

The card holder name, number, expiry date and security code of 5,471 purchases paid by card from September 25, 2020 to August 12, 2022 may have leaked. [1]

The names, addresses, phone numbers, email addresses, login passwords and newsletter preferences of up to 5,521 people who used the store from April 1, 2020 to August 24, 2022 may also have leaked, and for some also birth date, gender, occupation and company name. [1]