SHIGETA: the pre-renewal "SHIGETA PARIS official online store" was accessed without authorization and card data of 7,024 customers may have leaked

1. 2022-07-31

   It shut down the site of the pre-renewal store. [1]

2. 2022-09-02

   Some card companies told it of a concern that card data had leaked. [1]

3. 2022-09-21

   To check whether the new environment was also affected, it stopped card payments and had a third-party firm investigate. [1]

4. 2022-11-24

   The investigation finished and found that unauthorized access exploiting a vulnerability in part of the old system had tampered with the payment application. [1]

5. 2023-01-12

   It announced the case. [1]

The card holder name, number, expiry date and security code of 7,024 customers who paid by card at the pre-renewal store from March 2, 2021 to August 3, 2022 may have leaked, and some may have been misused. No trace of unauthorized access was found in the current store, which has operated since August 3, 2022. [1]