ANA Trading announced a September 4 restart of its Eraberu e-GIFT service after completing changes to address unauthorized access and fraudulent gift redemptions. The company scheduled the restart for 2 p.m. that day and said its investigation had established that the unauthorized redemptions resulted from the same intrusion. [S01]
The announcement adds a recovery milestone and a confirmed link between the two problems. ANA Trading had first disclosed the incident on August 24, when that connection was still under investigation.
The company said it had identified and corrected the relevant system weaknesses. It was arranging replacement gifts through corporate customers for recipients whose gifts had been at risk of unauthorized exchange. It also said gifts already delivered to corporate customers, including recipients' unredeemed gifts, could continue to be used.
ANA Trading reported completing individual notifications to affected corporate customers and their representatives. The September notice did not publish a count of affected gifts or a loss value, leaving the financial scale of the incident undisclosed.
According to the earlier disclosure, unauthorized access to the service's management system took place on August 11 and 12. Potentially exposed information concerned corporate customer contacts and identifiers, including names, company and login IDs, and partial email addresses. The company said passwords and financial information were excluded, and that it did not collect or retain ordinary gift recipients' personal data. [S02]
Eraberu e-GIFT is ANA Trading's digital gift service through which recipients choose partner electronic-money products or gift vouchers. Its corporate terms define the product as a gift voucher issued by ANA Trading. [S03]
That corporate distribution structure explains the replacement process: ANA Trading is working through the businesses that supplied the gifts to recipients. For those customers, the September announcement concerns both restarting supply and dealing with affected gift value, while the original intrusion remains an August event.