Abba House International announces possible customer information leak due to unauthorized access

On October 2, Abahouse International, which operates the men's casual brand Abahouse, announced that customers' personal information may have been leaked due to unauthorized access to its internal systems by a third party. It is possible that the entire database was illegally accessed, potentially affecting all customers whose membership information was entrusted to them.

On September 28, the company received inquiries from multiple customers saying they had received suspicious refund notification emails that matched their order information, and the company began investigating.

Names, addresses, order information, etc... customers who have withdrawn may also be leaked.

Information that may have been leaked includes member ID, name, address, phone number, email address, date of birth, gender, and order information (order date and time, product name, amount, delivery address, etc.). Credit card numbers and security codes are managed by the payment processing company's system, and no leaks have been confirmed.

There is a possibility that a third party may have illegally accessed the entire database, and since the scope of the information obtained has not been determined, it is possible that all customers whose member information has been entrusted to them may be affected.

Information on past orders was also retained as order data, so it is possible that information about customers who had already left their membership was also leaked.

Investigation after report of ``receiving a suspicious refund notification email that matched order information''

On September 28th, we received inquiries from multiple customers stating that they had received suspicious refund notification emails that matched their order information, and we began an investigation. Traces of unauthorized access were confirmed.

It is estimated that the unauthorized access occurred from the midnight of September 27th to the 28th. It is believed that a malicious program was installed and executed by exploiting system flaws, starting with an unauthorized login to the company's internal system, and gained unauthorized access to the database that stores member information and e-commerce order information.

Potentially affected customers were individually contacted on October 2nd via their registered email addresses with the subject line ``[Important] Regarding the possibility of leakage of customer membership information due to unauthorized access.''

Beware of suspicious emails such as “refund” and “out of stock”

We also observed suspicious emails pretending to be from the company and claiming to be ``refund'' or ``out of stock.'' ``Even if the information matches the actual order details, it does not necessarily mean that it is genuine,'' it says, urging customers to be especially careful about emails that come from email addresses unrelated to the company, those that prompt people to contact LINE, and those that set deadlines for refunds, such as ``by next Wednesday,'' and urge customers to hurry.

If you receive an email regarding a refund or out-of-stock item, we ask that you do not use the link or contact information in the email, but instead check the status of your order in your order history on My Page or contact our customer support center.