QUO Card has disclosed unauthorized access to the campaign system used by its official LINE account, with some users' display names and campaign-winning information potentially exposed. The gift-card issuer published the notice on September 29. [S01]
The company said it had identified the potentially affected system and implemented countermeasures. Investigations into the affected customers and the extent of the incident were continuing at the time of the disclosure.
QUO said the campaign system is completely separate from its payment platform and other company systems. It does not hold credit-card details, bank-account information or other payment data, so those categories were not exposed through this system, according to the company.
The notice concerns campaign participation information. It does not report access to gift-card balances or a compromise of the payment service.
QUO said it would contact customers individually if they were identified as potentially affected. It also warned of messages impersonating the company or campaign office and said it would not request passwords, payment details, transfers or authentication codes by email, LINE or SMS.
The September disclosure does not state how many people may be affected or give a date for the unauthorized access. Those details remained outside the facts the issuer had confirmed publicly.