RIZAP Online Store Breached, Card Data May Have Leaked

RIZAP disclosed on 10 August that its sports and outdoor e-commerce site, the APORITO online store, suffered unauthorised access and that customers' personal data and credit card information may have leaked. The site has been closed since the 5th with no reopening date. The point is not the company but the card numbers you have left on Japanese shopping sites.

Personal data leaks are routine news; possible card data exposure is another level, because it is directly monetisable. A closure of more than five days with no reopening date usually means the investigation is still open.

If you shopped there, check recent card statements now rather than waiting for a notice, which may take weeks. Also check for reused passwords, since credential stuffing is the common second wave. Long term, use virtual card numbers and decline to store cards.