Kagoshima Kumiai Foods: unauthorized access to its mail-order site "Kumishoku Farm", with 2,114 cards and data of 22,234 people possibly leaked

1. 2023-09-29

   Some credit card companies told it of a concern about leaked card data of customers who used the site. The same day it stopped card payments and began an investigation by a third-party body. [1]

2. 2023-10-02

   It reported to the Personal Information Protection Commission and filed a report with the police. [1]

3. 2023-11-28

   The investigation finished and confirmed that a flaw in part of the system was used to tamper with the payment application, leaking card data. [1]

4. 2024-02-19

   It announced the case and began contacting affected customers individually by email, with letters for those it could not reach. [1] [2]

The card numbers, expiry dates, security codes and site login data (email address, phone number, password) of 2,061 people (2,114 cards) who paid by card from May 30, 2021 to September 13, 2023 may have leaked. [1]

The names, addresses, phone numbers, email addresses, login passwords and delivery data of 22,234 people in the database (including the 2,061 with card data) may also have leaked. Gender, birth date, occupation and company name apply only to customers who entered them. The site's reopening is undecided. [1]