Mizkan: 487 Mizkan365 profiles altered and 29 people’s data leaked

Unauthorized access on 30 October altered nicknames and icons on 487 accounts. Mizkan learned of it through a customer inquiry on 2 November, stopped the site and fixed the flaw. Code in altered profile displays ran when viewed, leaking 29 people’s customer IDs and email addresses. For 26 of them, site-point redemption and campaign-application counts were also exposed. Altered accounts and people with leaked data are separate counts. [1]

Mizkan confirmed no exposure of names, addresses, phones, passwords or card data and no changes to email addresses or passwords. Its official shop and Fibee Community, using the same mechanism, were stopped as a precaution on 4 November. No impact on those sites has been confirmed; safety checks and restoration continue. [1]