OTOTOY: unauthorized access to the OTOTOY music store

From about 22:00 on 18 October, the OTOTOY music store received threatening access to its systems; operator OTOTOY noticed it at about 14:00 on 19 October and stopped the service. After fixing its systems it reopened at about 22:00 on 20 October, and on 21 October said internal user IDs, emails and sign-up dates of up to about 480,000 members may have been viewed or taken. It found no sign that hashed passwords, purchase history or addresses were taken.