Shiseido: skin-analysis system breach leaks 2,515 records, including names and skin results

Unauthorized access to the Facial Condition Analyzer (FCA) online skin-analysis system was detected on 27 October. Some data was altered and extracted, with 2,515 leaked records containing names, emails, ages, gender, member IDs, questionnaire data, skin results and timestamps. Face images are excluded and the system does not handle cards. The developer and external specialists are investigating the cause and scope. [1]

Confirmed exposure concerns Beauty Alive Circulation Check at Shiseido Online Store and SHISEIDO’s in-store/online services. Hada Pasha, Men’s Skin Checker, ELIXIR AI Skin Analyzer, IPSA AI Recipist mico and CO-HADA Scan also use FCA and are stopped as a precaution, with no confirmed exposure in those services. No restart date is set. [1] [2] [3]