eplus: unauthorized access to the e-ticket refund system

A system at ticket seller eplus that manages refunds for its Smart Ticket e-tickets was accessed several times from the evening of 11 September to early 12 September, and 1,463 personal records leaked. They belong to some people who applied for refunds for cancelled shows between 30 June 2022 and 11 September 2026: emails, names in kana and show details, plus bank account details for 751 who chose bank transfer and addresses for 68 who chose postal remittance. It fixed the settings and cut off access on 15 September. The system is separate from the member database, and no card data or passwords were included.