2026-11-12
Unauthorized access to Edion's online store (order data on up to 9,554 customers and more): card details, gift card PINs and login credentials may have leaked — what users should do
On November 6, 2026, Edion Corporation announced that unauthorized access to the server hosting its online store may have leaked some customers' personal information, and on November 9 its second report corrected and added to that notice. The first report listed information recorded in log files for up to 4,131 customers (name, email address, phone number, date of birth, address, customer number and more) and order information for up to 9,554 customers (name, order number, order amount, credit card expiry date, gift card number and more), and said credit card numbers and login passwords were not included. The second report corrects this: credit card information recorded in order-time error logs (number, expiry date, cardholder name, security code) for up to 5 cases, Edion Gift Card information for 5,360 cards (number, PIN, usage history), and login IDs and passwords for up to 1,141 customers were included. It also says a malicious program had been inserted into payment-related processing by an outside third party and had been running since just after 19:00 on November 4. For card details newly entered on a PC at the payment input screen (up to 556 entries), the company cannot rule out that they leaked directly to a third party; smartphones were not affected. The company stopped the online store and related services at 22:00 on November 7, and the online store has no restart date. This site's conclusion: if you entered a new card on Edion's online store from a PC after 19:00 on November 4, check your statement and ask your card company about changing the card number.