Notice of Resumption of Credit Card Payments

April 28, 2021

To our customers

Design X Co., Ltd.

Haruhiko Yamamoto, Representative Director

Notice of Resumption of Credit Card Payments

We have now received approval from each card company regarding the security measures we have implemented to date, and credit card payments will be resumed from 8:00 today. We would like to offer our deepest apologies for causing our customers and all other concerned parties great inconvenience and concern. We will continue to take all possible security measures to ensure that our customers can make purchases safely, and we sincerely ask for your understanding and support.

Details

1. Background to the resumption

The unauthorized access to our site, as explained in the "Apology and Notice Regarding the Leakage of Credit Card Information Due to Unauthorized Access to Our Website" reported on 3/29, resulted in the leakage of credit card information for some customers. We have taken this matter very seriously and have implemented measures to prevent recurrence. Following an investigation by a third-party investigative organization and screening by the card companies, we are now resuming credit card payments. For details, please refer to the "Frequently Asked Questions Regarding Credit Card Information Leakage."

2. Security measures implemented

To prevent a similar incident from ever happening again, we implemented the following measures. 

・Immediately fixed vulnerabilities in the file upload function, enabled SELinux, and improved security against tampering.
・Migrated the server environment to a secure public cloud environment built on the latest OS/middleware.
・Introduced an advanced firewall (WAF) to block unauthorized access and attacks.
・Introduced two-factor authentication for the server environment and management tools.
・Installed antivirus software on the server and perform regular virus scans.
・Regularly apply critical OS/middleware-level patches.
・Introduced an FIM (File Integrity Monitoring) solution to detect file tampering.
・In addition to the above, we have implemented various security enhancements and, in line with PCI DSS requirements, established an information security framework and rebuilt our operations and monitoring systems.

3. Going forward

First and foremost, we will do our utmost to strengthen security and monitoring so that customers can safely purchase products. The details of the unauthorized use are currently being analyzed by the card companies, and they are scheduled to report back to us by the end of August. Once again, please rest assured that we will fully compensate for any losses resulting from the unauthorized use, as well as the cost of replacing cards.

4. Contact for inquiries regarding this matter

≪Design X Co., Ltd. Customer Support Desk≫

・Hours: 9:00–18:00 (excluding Saturdays, Sundays, and public holidays)

・Phone number: Toll-free 0120-978882 

・Email address: contact@designx.co.jp 

End