Hokkaido Sanchi Chokuso Center: card data of 18,443 and personal data of 54,583 customers may have leaked from its online shop

Hokkaido Sanchi Chokuso Center, a mail-order seller of farm and sea products in Sapporo, announced on 26 June 2024 that its online shop "Sanchi Chokuso Center" had been accessed without authorization and that customer data may have leaked. According to ScanNetSecurity, a card company raised a leak concern on 19 April and card payments were stopped that day; a third-party investigation completed on 9 May found that on 30 March 2021 the payment application had been tampered with through unauthorized access exploiting a weakness in the site, so card and personal data entered with orders may have leaked and some cards may have been misused. A malicious tool that allowed access to all data in the database had also been planted. The separately reported cohorts are 18,443 card customers and 54,583 people with general personal data; a deduplicated combined total was not stated.