System5: unauthorized access to a system linked to the online shop

On 22 October video and audio equipment retailer System5 took its site offline after the contractor that develops and maintains a system linked to its online shop reported unauthorized access. A follow-up on 24 October said names, email addresses, points data and product review data of up to about 15,000 customers were taken. Card data and passwords are not stored in its systems. The shop reopened around 19:00 on 24 October with login by a six-digit code sent by email, while points, reviews and other functions remain stopped. It reported the case to the Personal Information Protection Commission and consulted the police. Its report of findings on 27 October put the number at up to 15,671 people, with names, email addresses, customer IDs, points and review data. Card data, passwords, phone numbers and addresses are not included.