Welcia Yakkyoku: support scam gave remote access to an employee's PC; data of about 40,000 Welcia.com customers at risk

On 8 November 2024 Welcia Yakkyoku said a work PC of an employee who handles its online shop Welcia.com had been accessed through a support scam. On 24 October the employee was lured to a support scam site and made to install remote control software. The PC was cut off from the network once this was found, but for some time data of 39,805 customers (including former members: names, addresses, phone numbers, birth dates, sex, IDs and passwords, purchased products) and 931 group employees (names, departments, work email addresses) was at risk. The investigation report of 28 November found no clear trace of access to customer data or data transfer, and the company judged a leak very unlikely.