FIT: the payment application of "FA Kiki.com" was tampered with, and card data of 5,877 customers and personal data of up to 26,394 may have leaked

1. 2022-12-28

   Some credit card companies told it of a concern that customers' card data had leaked. The same day it stopped card payments and started an investigation by a third-party firm. [1] [2]

2. 2023-03-13

   The investigation ended. It found that a third party exploited a system vulnerability to tamper with the payment application, and card data may have leaked. [1] [2]

3. 2023-07-10

   It announced the case and is contacting the customers concerned individually. [1] [2]

Credit card data may have leaked for 5,877 people. This covers payments from March 31, 2021 to December 6, 2022 and on December 21, 2022, and includes the card number, expiry date, security code, login ID (email address), login password and phone number. In addition, the company name, name, address, phone number, email address, login password and order information of up to 26,394 people who registered or bought from February 25, 2012 to December 22, 2022 may have leaked. [1] [2]