EDION online shop breach may have exposed customer and payment data
Unauthorised access to server logs and the insertion of malware into the desktop checkout page were confirmed at EDION’s online shop in Japan. Personal information belonging to up to 13,685 people and newly entered card details from up to 556 transactions may have been leaked, with 5,360 gift cards and login information belonging to up to 1,141 people also potentially exposed. The company suspended online shop operations at 10 pm on 7 November and began an investigation.
Key facts
- Affected organisation
- EDION
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Possible exposure of personal information belonging to up to 13,685 people, card details entered in up to 556 transactions, 5,360 gift cards and login information belonging to up to 1,141 people
- Cause / method
- Unauthorised access to server log files and insertion of information-stealing malware into the desktop checkout page
- Location
- Japan
If your data was exposed
Exposed dataCard detailsUsernamePasswordUsage & purchase history
- Change your password, and also change it on any other site where you use the same one. Turn on two-factor authentication if available.
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
- Turn on payment alerts in your card issuer’s app, and if you see a charge you don’t recognise, ask the issuer to block and reissue the card.
Timeline
- EDION suspended online shop operations from 10 pm.
- It was disclosed that unauthorised access to online shop logs may have leaked personal information belonging to up to 9,554 people.
- The possible exposure of personal information belonging to up to 13,685 people and the possible theft of card details from up to 556 transactions through malware on the checkout page were disclosed.
- It emerged that card information in error logs, 5,360 gift cards and login information belonging to up to 1,141 people may also have been exposed.
20 related reports
- エディオン、ECサイトのログに不正アクセス 最大9,554名の個人情報漏洩の恐れ、クレジットカード有効期限も対象の可能性
- エディオン通販サイトに不正アクセス、情報漏えいのおそれ
- エディオン通販サイトに不正アクセス、情報漏えいのおそれ(アスキー)
- EDION Breach: Card Codes and Passwords in Error Logs, and a Skimmer Nobody Noticed for Three Days
- クレジットカード情報流出で深刻。エディオン緊急システムメンテナンス、48時間以上経過
- EDION EC Site: Unauthorized Access and Payment Screen Tampering May Expose up to 556 PC Credit Card Entries, 5,360 Gift Cards, and up to 1,141 Login IDs and Passwords; Site Suspended Since November 7 at 22:00
- エディオンでセキュリティコード含むクレカ情報など流出の可能性 通販サイトに不正アクセス
- エディオン[2730]:当社ECサイトへの不正アクセスに伴う個人情報の漏洩およびサービスの停止について 2026年11月10日(適時開示) :日経会社情報DIGITAL
- 【速報】エディオンの通販サイトに「不正プログラム」組み込まれる 稼働中に利用者がPCから入力したクレジットカード情報が漏洩した可能性も 注意呼びかけ
- エディオン、不正アクセスによる個人情報漏えいで各種サービスを停止
- エディオン 不正プログラムでクレカ情報500件余漏えいのおそれ | NHKニュース | サイバー攻撃、AI・ネット・IT、企業・経営
- 「エディオン」不正アクセス被害 クレジットカード情報など流出か
- 「エディオン」不正アクセス被害 クレジットカード情報など流出か(HOME広島ホームテレビ)
- エディオン顧客情報流出か クレカ決済情報556回分
- エディオン、ECサイトに不正アクセス クレカ決済556回分の情報流出か
- 【エディオン】最大556件のクレジットカード番号も漏洩か… 通販サイトへの不正アクセスをめぐり 広島(テレビ新広島)
- エディオン、クレカ番号+セキュリティコードも一部漏えいか 決済処理に不正プログラム、エラーログにも記録
- Take card payments on your site? EDION says a hidden program on its checkout page sent card details to a third party.
- Unauthorized access to Edion's online store (order data on up to 9,554 customers and more): card details, gift card PINs and login credentials may have leaked — what users should do
- エディオンのECサイトに不正アクセス、クレカ番号とセキュリティコードが漏えいした可能性。決済情報入力処理に不正なプログラム(ネットショップ担当者フォーラム)
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.