Wave: the system managing its web upload service for print orders was breached, and up to 176,810 customer records may have leaked

1. 2025-10-29

   It detected unauthorized access to its EC site server and cut the server off from the network the same day. The investigation found signs of unauthorized access to the system managing the web upload service. [1]

2. 2025-10-31

   It announced the unauthorized access and the possible leak of personal data and reported to the Personal Information Protection Commission. [1]

3. 2025-11-17

   It was reported that an emergency response headquarters had been set up, headed by the president of its parent company. [2]

4. 2026-01-16

   Investigation findings were reported, saying brute-force attacks on an SSH server had been confirmed. [3]

5. 2026-04-01

   It published the final report. The outside investigation confirmed that a third party may have viewed system information, but found no trace of data transfer to the outside or of access to the database. [1] [4]

The scope is customers who used the upload service between August 20, 2010 and October 30, 2025, up to 176,810 records: names, email addresses, print submission data, EC site customer IDs and EC product quotations. Credit card data is not held on the server. No leak or secondary harm has been confirmed. [1]

It says it has finished strengthening the server's security and building monitoring. From April 1 it emailed the people who may be affected. [1]