WASABI: unauthorized access to the WASABI SWITCH order and inventory system

On 16 October, WASABI, which provides the e-commerce order management system WASABI SWITCH to resale businesses, said unauthorized access had leaked order data of its client shops. Since the day before, buyers had been receiving emails quoting real orders, posing as refunds for sold-out items and steering them to LINE. The data includes names, addresses, phone numbers, email addresses and order dates and amounts; the system holds no card data. The entry routes were blocked by 20:30 on 18 October, and after matching the affected data against an outside investigation it finished notifying each shop on 25 October. The service remains stopped. KOMEHYO HOLDINGS said on 23 October that 473 orders from group shops leaked, and Valuence Japan says orders placed with ALLU through outside marketplaces may be included.