La traducción al español está en camino; mientras tanto se muestra la versión en inglés.
Fancl and Attenir say unauthorised access to online stores leaked 785,000 members' data
En breve
Cosmetics and health food company Fancl and its subsidiary Attenir (アテニア) said on October 16 that their e-commerce sites suffered unauthorised access between October 3 and 10, leaking personal data of 368,184 Fancl members and 417,312 Attenir members, 785,496 people in all. The leaked data includes names, addresses, email addresses, phone numbers and dates of birth, but not main passwords or credit card and other payment details. The companies said they had not confirmed any public release or misuse of the data.
Leer la noticia completa 2 min de lectura
Fancl, a Yokohama-based maker of cosmetics and health foods, and its subsidiary Attenir (アテニア) said on October 16 that their e-commerce sites had been accessed without authorisation by an outside party and that members' personal information had leaked. ITmedia reported that 393,785 records covering 368,184 people were affected at Fancl and 441,162 records covering 417,312 people at Attenir. The Asahi Shimbun put the combined total at 785,496 people, and NHK reported more than 780,000. Kyodo News, carried by the Tokyo Shimbun, reported about 390,000 cases at Fancl and about 440,000 at Attenir. [ 1 , 2 , 4 , 5 ]
According to ITmedia, the leaked member registration data includes names, addresses, email addresses, phone numbers, dates of birth, gender, customer numbers, sub email addresses and their hashed passwords, security question items without the answers, and points and membership stage information. The hashed passwords are secondary passwords set by some members; main passwords were not affected. Credit card and other payment information was not included, the companies said. [ 1 , 2 , 5 ]
The unauthorised access took place between October 3 and October 10 and came to light in an internal investigation carried out on October 15, the companies said. They identified and stopped the function that caused it. The Asahi Shimbun reported that on October 16 the companies reported the matter to, and consulted, the Personal Information Protection Commission and the police. [ 1 , 2 , 5 ]
As of the announcement, the companies said they had not confirmed any release of the information to the public or any misuse, and ITmedia reported that no customers had come forward about it. Affected members will be contacted individually by email. ITmedia reported that the companies said there was no impact on their business activities or services. [ 1 , 2 , 5 ]
A joint inquiry hotline for both companies (0120-333-600) opens at 9 a.m. on October 17, and inquiries are also accepted by email at [email protected], the Asahi Shimbun reported. ITmedia noted that Fancl is a wholly owned subsidiary of Kirin Holdings, and the Asahi Shimbun described Attenir as an ageing-care brand under Fancl. [ 1 , 5 ]
Por qué importa
The leak affects the member records of two cosmetics retailers' online stores, involving more than 780,000 people, and the companies have reported it to the Personal Information Protection Commission and the police, according to the Asahi Shimbun. Affected members are to be contacted by email, and a joint hotline opens on October 17.
Datos clave
- Fancl and its subsidiary Attenir said on October 16 that their e-commerce sites had been accessed without authorisation. [ 1 , 2 , 5 ]
- The unauthorised access took place between October 3 and October 10 and was found in an internal investigation on October 15. [ 1 , 5 ]
- Affected records number 393,785 at Fancl (368,184 people) and 441,162 at Attenir (417,312 people); the Asahi Shimbun put the total at 785,496 people. [ 1 , 5 ]
- Leaked data includes names, addresses, email addresses, phone numbers, dates of birth, gender and customer numbers. [ 1 , 2 , 5 ]
- Main passwords and credit card and other payment information were not included. [ 1 , 2 , 5 ]
- The companies said they had not confirmed any release of the data to the public or any misuse. [ 1 , 2 , 5 ]
- The function that caused the leak was identified and stopped. [ 1 , 5 ]
- Fancl is a wholly owned subsidiary of Kirin Holdings. [ 1 ]
Confirmado por varias fuentes
- Fancl and Attenir's e-commerce sites were accessed without authorisation and members' personal information leaked. [ 1 , 2 , 4 , 5 ]
- The leak covers more than 780,000 people across the two companies. [ 1 , 4 , 5 ]
- The unauthorised access occurred from October 3 to October 10. [ 1 , 2 , 5 ]
- Payment information such as credit card details was not leaked. [ 1 , 2 , 5 ]
- No public release or misuse of the leaked data has been confirmed. [ 1 , 2 , 5 ]
- Affected members will be contacted by email. [ 1 , 5 ]
Aún sin aclarar
- Who carried out the unauthorised access and which site function was exploited. The documents say only that the function behind the leak was identified and stopped, without naming it or any perpetrator.
- Whether the total is about 830,000 or about 785,000. ITmedia's headline counts about 830,000 records, while NHK and the Asahi Shimbun count about 785,000 people; the gap reflects records versus individuals rather than a dispute.
- That the business and services are unaffected. Only ITmedia reports the companies' statement that there is no impact on business activities or services.
Qué dicen los medios locales
Cronología, hora local
- October 16: ITmedia reports the announcement with full breakdown of leaked records. [ 1 ]
- October 16: Kyodo News reports Fancl's leak of about 390,000 cases and Attenir's of about 440,000. [ 2 ]
- October 16: NHK reports that more than 780,000 people's data leaked. [ 4 ]
- October 16: The Asahi Shimbun reports the companies informed the Personal Information Protection Commission and police. [ 5 ]
- October 17: A joint inquiry hotline for both companies is to open. [ 5 ]