Tokyo Tamago Honpo: card data (65,387 records) and personal data (73,961 records) may have leaked from its Tokyo Tamago Gomatamago online shop

Tokyo Tamago Honpo, maker of sweets such as "Tokyo Tamago Gomatamago", announced on 31 July 2024 that personal data may have leaked after unauthorized access to its "Tokyo Tamago Honpo official online shop". According to ScanNetSecurity, the Tokyo Metropolitan Police told it on 28 May that part of the site may have been tampered with; card payments were stopped that day and the site was closed on 8 June. A third-party investigation completed on 20 June found that the payment application had been tampered with through unauthorized access exploiting a weakness in the system. Affected are 65,387 card records (holder names, numbers, expiry dates, security codes) of customers who paid by card between 18 March 2021 and 28 May 2024, and 73,961 records of other users with names, addresses, email addresses, phone numbers, birth dates, gender, occupations, purchase histories and more.