Doutor: online-shop breach may expose 24,771 customer records

The official shop was accessed without authorization on 24–25 October. Its payment processor detected an anomaly on 28 October and its operating contractor reported it on 30 October. Potential exposure covers 24,762 member records and 9 delivery-address records, a company-stated total of 24,771. The site and new subscription orders are stopped, while confirmed orders continue shipping. [1]

Member data includes names, customer IDs, company names, addresses, emails, phones, birth dates, gender, occupation, purchase history and preferred stores. Delivery data covers names and prefectures. Login passwords and card data were confirmed not leaked. This is separate from the employee-data incident disclosed in October. [1]