IKETEI: the payment application of its online shop was tampered with, possibly leaking 30,712 card records

1. 2025-02-26

   Some credit card companies told it that card data of customers who used the site might have leaked. [1]

2. 2025-02-27

   It stopped the site and card payments and started an investigation by a third-party firm. [1]

3. 2025-03-25

   The investigation finished and it confirmed that the payment application had been tampered with, card data leaked, and some of it may have been misused. [1] [2]

4. 2025-05-21

   It announced the incident. [1] [2]

Card data of 30,712 records, used from February 24, 2020 to October 15, 2024, may have leaked. A database of 90,513 personal records including names and addresses was also accessible, but no outflow was confirmed. [1] [2]