Fordays: about 5.6 million abnormal requests hit its member site, possibly leaking names and addresses of 1,347,445 members

1. 2025-04-18

   An abnormal number of requests from a specific IP address began hitting the member information lookup function. They continued until May 3 and reached about 5.6 million. [1] [2]

2. 2025-05-16

   It put emergency security measures in place. [1]

3. 2025-05-20

   It announced the incident. It had reported to the Personal Information Protection Commission and notified the police. It said it had not confirmed an actual leak or secondary damage. [1] [2]

The data that may have leaked is, for 1,347,445 records, member ID, registration date, name, gender, birth date, address, phone and fax numbers, email address, account holder name, bank and branch names, whether a credit card is registered, and invoice registration number. Account numbers, login passwords and credit card data were not leaked. Members whose IDs start with 0 to 5 are covered. [1]