Slow Village: personal data of 32,345 customers, including card data of 4,494, may have leaked from its online shop

Slow Village, a mail-order seller of health foods and cosmetics in Yamanashi, announced on 24 October 2024 that its "Slow Village online shop" had been accessed without authorization and that personal data of 32,345 customers (4,494 of them including card data) may have leaked. A card company raised a leak concern on 19 June and card payments were stopped; a third-party investigation completed on 7 July found that a weakness in the system had been exploited to tamper with the payment application. Card holder names, numbers, expiry dates, security codes, names, addresses, email addresses, phone and fax numbers from 4 February 2021 to 28 May 2024 are affected. In that period 23,466 random number combinations were also entered into the card field of the payment page, so up to that many valid card numbers may have been entered.