Treasure Factory: unauthorized access to the case management system for home pickup and moving

Between early morning and morning on October 20, a vulnerability in database access in the case management system used for Home Pickup and Trefac Moving applications was exploited. Customer data on 746,277 people (email addresses, 11 of them with names and addresses), names and emails of 750 business partners and staff, and names and device identifiers of 1,000 devices were taken. At 10:30 that day the company cut external access to the system and stopped the application forms. Payment data was not included, and the attack was unrelated to the PHP vulnerability. It is separate from the August incident at subsidiary Kind Oal.