Hackers access Doutor Coffee online shop admin panel, exposing about 25,000 member records

Japan's Doutor Coffee said on November 6 that its payment processor reported suspicious activity on its official online shop on October 28, and an investigation by its outsourced developer found a third party had accessed the site's admin panel on October 24-25 and exported and viewed member data ^[1]. Data that may have leaked covers 24,762 member records and 9 delivery records, 24,771 in total, including member IDs, names, addresses, email addresses, phone numbers and purchase information, with birth dates, gender, occupation and company names for some; the company says login passwords and credit card data were not leaked ^[1][2]. Anyone registered on the shop should beware of suspicious emails, texts and calls impersonating Doutor or its affiliates; Doutor says it never asks for passwords, card numbers or security codes by email or phone ^[1].

Industries mainly affected: Retail

Anyone registered on the shop should beware of suspicious emails, texts and calls impersonating Doutor or its affiliates; Doutor says it never asks for passwords, card numbers or security codes by email or phone