Unauthorized activity was confirmed in part of the transaction system operated by GMOペイメントゲートウェイ, and the company announced that 69 customer records, including information related to Life Card's V Preca service, may have been obtained. Part of the affected service has been suspended while countermeasures are implemented.
GMOペイメントゲートウェイ said that unauthorized activity occurred in part of its transaction system and that the affected area was part of the service it provides to Life Card. It disclosed that 69 customer records may have been obtained externally.
The information comprised 3 records containing V Preca card numbers, security codes, expiry dates and names; 3 records containing portions of card numbers; and 63 records containing names, email addresses, telephone numbers and partial addresses.
As a countermeasure, part of the affected service has been suspended while security is verified and measures to prevent recurrence are implemented. The company plans to contact affected individuals individually through Life Card and explained that other payment processing services are not affected.
The GMO group has disclosed a succession of unauthorized access incidents, increasing scrutiny of its information management framework as a whole. The incidents are viewed as an opportunity for a payment infrastructure provider to review the security measures of its outsourced providers.