Monitas: SQL injection attack on the Qzoo survey site

From about 8:30 on October 17 a third party accessed the survey site Qzoo without authorization and, at about 12:22, read and modified its database through SQL injection. The company detected it at 18:44, cut off the access and stopped the service. Data on all of the about 400,000 members held by the system may have leaked: names, birth dates, addresses, phone numbers, emails, member IDs and passwords, bank account details, and survey answers such as income and occupation. The company holds no credit card data or My Number.