Tozai Tetsugaku Shoin: card data (18,394 records) and personal data of 50,338 customers may have leaked from the Hakubun Eikodo online shop

Tozai Tetsugaku Shoin, a bookshop operator in Shinjuku, Tokyo, disclosed on 3 June 2024 that its online store "Hakubun Eikodo online shop" may have been compromised. The Tokyo Metropolitan Police cybercrime division alerted it to a possible card data leak on 29 May, and card payments were stopped the same day. A third-party investigation completed on 26 June found that the payment application had been tampered with through unauthorized access exploiting a weakness in the system. Its announcement of 5 November said 18,394 card records (holder names, numbers, expiry dates and security codes) of 15,986 customers who paid by card between 7 April 2021 and 29 May 2024, and names, addresses, phone and fax numbers, order details and delivery addresses of 50,338 customers who entered their details between 1 May 2018 and 29 May 2024, may have leaked; some cards may have been misused.