Active: SQL injection attack on its frozen food online store

On 2 October, the online store of Active (Takamatsu), a maker of frozen food for restaurants, was hit by an SQL injection attack on a specific page; log analysis found the traces the next day. Customer and order data had been exported through an administrator account the attacker created, and up to 54,916 records with store names, addresses, phone numbers, emails, order amounts and delivery addresses may have leaked. Card data, bank details and passwords were not included.