And & ST HD, Xebio HD and Treasure Factory announced information leaks caused by unauthorized access. The suspected scale and contents of the personal information affected at each company are summarized below.
On 23 October, And & ST Holdings (HD), Xebio HD and Treasure Factory announced information leaks. The possible leakage of customer, business partner and employee information was indicated, but credit card numbers and login passwords were reportedly not included.
And & ST HD announced that unauthorized access to its business servers may have resulted in the leakage of approximately 2.5 million customer records, approximately 10,000 business partner records and information relating to the relevant number of employees.
Unauthorized access occurred to “Commerble,” the e-commerce platform used by Xebio's e-commerce subsidiary. The incident may have affected approximately 128,000 customer records, including purchaser names and email addresses, approximately 122,000 address records, and approximately 158,000 email records, including the contents of order emails and recipient email addresses.
Treasure Factory reported unauthorized access to the case management systems for “on-site purchasing” and “Trefac Moving.” It said that 746,277 customer email addresses, a total of 750 names and email addresses of business partners and employees, and 1,000 device records used by business partners and employees may have been leaked.
All 3 companies said that the leaked information did not include customers' credit card numbers or login passwords.