SOFT99: unauthorized access to its official online shop; data on up to 136,968 people may be exposed

On 5 November the shop's contractor reported suspicious activity. Its investigation found that an outsider uploaded a program file through the image attachment of the inquiry form, used it to plant a file that accepts remote commands, and with the site program's privileges explored the server and read configuration files. [1]

The shop was taken offline, the access route cut and access restrictions tightened. The case was reported to the Personal Information Protection Commission on 9 November; outside experts will investigate before preventive measures are set. [1]

For up to 136,968 people who registered or bought by 5 November: name, address, email, phone, birth date, gender, purchase and delivery details, and the last four card digits, expiry date and cardholder name. Who is affected and how many are still being confirmed; 136,968 is the upper bound. Full card numbers are not listed. [1]