Breaches and incidents
Seicomart: app server used to reach member database, 574,647 members’ data viewed
Seicomart said a third party accessed the member server via the Seicomart App server.
- Disclosed
- Verification
- Checked against a primary source
What happened
- Seicomart said a third party accessed the member server via the Seicomart App server; it confirmed 574,647 members’ data viewed (name, gender, DOB, address, phone, email, club card dates); passwords and purchase history were not leaked.
- Root cause: not disclosed; the company declined to detail the method citing police coordination. The breach surfaced after one account’s club card was fraudulently cancelled on 24 Sep, found on 28 Sep.
- No attacker named.
- The server was disconnected on 28 Sep; authorities were notified; app and web self-service for member info changes has been permanently ended in favour of store/form requests.