Alpha-uni: unauthorized access to its official shop; card data of 1,054 customers and personal data of 3,126 members may have leaked

Alpha-uni, a seller of medical uniforms, announced on 17 June 2024 that its "Alpha-uni official shop" had been accessed without authorization and that card data of 1,054 customers and personal data of 3,126 people may have leaked. On 18 January the Chiba Prefectural Police cybercrime division told it of a possible leak, and card payments were stopped that day. A third-party investigation completed on 14 March found that an attacker posing as a normal user and placing fraudulent orders had exploited a weakness in the system and altered it. Card data of 1,054 customers who paid by card between 21 May 2021 and 2 January 2024 leaked, and some cards may have been misused. Personal data of 3,126 people who registered as members by 13 February 2024 may also have been viewed. The scope also includes card users' login details (email, password and phone) and members' names, addresses, phones, email, organization, gender and order history.