Higashihara Shoten: unauthorized access to the Olive beef Higashihara shop; personal data of 27,561 customers, including 1,703 cards, may have leaked

According to Nikkei xTECH, Higashihara Shoten announced on 16 July 2024 that its "Olive beef Higashihara" online shop had been accessed without authorization and that personal data of 27,561 customers, including card data of 1,703, may have leaked. An attacker exploited a weakness in the system and altered the payment application. Some card companies raised a leak concern on 11 March 2024 and card payments were stopped that day; the third-party investigation finished on 19 April. Card holder names, numbers, expiry dates, security codes and login passwords of 1,703 customers who paid by card between 1 March 2021 and 9 April 2024, and names, addresses, email addresses, phone numbers, birth dates and more of 27,561 users from 1 February 2011 to 9 April 2024, are affected. Some cards may have been misused.