Aena: unauthorized access to its shopping app

Log analysis showed at 05:58 on 13 October that member pages of Aena's cosmetics shopping app had been viewed without authorization. Names, addresses, phone numbers, email addresses, birth dates, occupations and the last four digits, expiry and holder name of saved cards of up to 817,215 members may have been viewed. The access was automated and repeated; full card numbers and login passwords did not leak. Its October 20 notice said safety checks were complete and the EC app had reopened at noon on October 19.