Fine: the web server of its online shop was hacked and tampered with, and 912 credit card records may have leaked

The Metropolitan Police Department's cybercrime unit told it that some shop files showed signs of tampering and buyers' card data might be leaking. It stopped the system, cut outside access and preserved logs and files. [1] [2]

It announced the findings. An unauthorized access exploiting a web server vulnerability and file tampering (a malicious program) were confirmed. The scope was 912 card purchases from November 9, 2017 to June 30, 2026. There was no sign that login IDs or passwords leaked. [1] [2]