Sankyo Shokai: the "Sankyo Shokai official shop" was accessed without authorization and card data of 8,794 customers leaked

1. 2022-08-26

   A payment agency told it of a concern that card data had leaked. The same day it removed the card payment option from the site. [2]

2. 2022-08-31

   It stopped card payments and all services on the site, and began an investigation by a third-party firm. [2]

3. 2022-11-24

   The investigation finished. [2]

4. 2023-02-20

   It announced the case. [1] [2]

Card data of 8,794 customers leaked and some may have been misused. Personal data of customers may also have leaked. The cause was that a vulnerability in part of the site's system was exploited and the payment application tampered with. [2]