Wacom: the old system of the "Wacom Store" was accessed without authorization, and 1,938 card records and personal data of up to 147,545 people may have leaked

1. 2022-04-19

   At noon it closed the site on the old system that had been accessed and moved to a new system. [1]

2. 2022-08-19

   Some card companies told it of a concern that card data had leaked. [1]

3. 2022-08-22

   It stopped sales and card payments at the store and reported to the Personal Information Protection Commission. [1]

4. 2022-09-30

   The investigation by a third-party firm finished. [1]

5. 2022-10-03

   It reported the damage to the cybercrime unit of the Saitama Prefectural Police and the Kazo police station. [1]

6. 2022-11-21

   It announced the case and began notifying the customers concerned by email and letter. [1] [2]

For up to 1,938 purchases made from February 19 to the morning of April 19, 2022, the card holder name, number, expiry date, security code and email address may have leaked. The application handling the payment screen was tampered with and sent the entered data outside. [1]

The names, postal codes, addresses, phone numbers, email addresses and genders of up to 147,545 people who used the store from February 22, 2021 to the morning of April 19, 2022 may also have been accessed from outside. For the 100,565 store members this includes the member ID, points and mailing preferences, and for some also company name, school name, fax number, birth date and occupation. It does not include card data. [1]