eBay-owned Japanese marketplace Qoo10 confirmed that an outside party broke into its systems November 6 and saw customer data, including names, phone numbers, birth dates, home and delivery addresses with their map coordinates, profiling data, and physical characteristics that shoppers had shared. Qoo10 hasn’t said how many accounts were hit or how the intruder got in, but it says it cut off the access, invalidated authentication tokens, and logged out affected accounts, and that it found no sign that passwords or payment details leaked. The marketplace has added AI skin analysis and virtual contact lens try-on from Perfect Corp. since August, both of which use shoppers’ faces, but hasn’t said whether it keeps those images or whether they fall under the exposed data.
