BASE Subsidiary Breach May Have Leaked Up to 8.85 Million Records, Including Card Data
# BASE# data breach# e-commerce platform# card data
Key Points
- Estore, a BASE subsidiary based in Tokyo's Minato Ward, said on 1 August that its e-commerce platform Shop Serve suffered unauthorised access.
- Up to 8,853,839 records of buyer data may have leaked, including partial credit card numbers.
- Those affected are merchants running stores on the service and their customers.
Analysis
The scale here is less about the record count than the position. The breach hit an e-commerce platform provider, so one intrusion exposed buyer data across every merchant on it, card fragments included. Anyone running a store on SaaS should be clear about the trade: outsourcing security to the platform also concentrates the risk there, and you learn whether you were hit when they tell you.