Matsui Shuzo: malicious files planted on its online store; card data of 174 customers may have leaked

On 13 May 2024 Matsui Shuzo, a whisky and sake maker in Kurayoshi, Tottori, announced that its direct sales site had been accessed without authorization and that card data of 174 customers may have leaked (ITmedia NEWS). A card payment processor raised the concern on 20 September 2023, and card payments were stopped. A third-party investigation completed on 23 January 2024 found that an attacker had exploited a weakness in the site system and planted malicious files that steal customer data before 29 March 2023. Card numbers, expiry dates, security codes, email addresses and passwords of customers who paid by card between 29 March and 20 September 2023 are affected, and some cards may have been misused.