Takagi Koji Shoten: shop intrusion puts customer data and password hashes at risk

Suspicious orders on 3-4 September and unauthorized admin accounts/programs found around 21:00 on 4 September prompted closure. A shopping-system flaw was the likely route. Names, addresses, phones, emails, orders, password hashes and delivery contacts may be exposed; no count was stated. Cards were not stored locally, but the first report did not fully rule out card impact. [1]

The planned investigation, customer notices and PPC reporting are complete. No additional harm or concrete evidence of data removal was found, but possible access is not ruled out. Shop functions and self-service password changes remain unavailable, with no reopening date. Customers who reused the password elsewhere should change it there. [2]